pushpad/pushpad-php

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although a recent release shows some activity, the short-term development pause is a maintenance concern.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy. This weakens the project's published process for receiving and handling vulnerability reports, though it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported high-confidence findings or unsafe sinks. Its one action reference is unpinned, which is a modest reproducibility and supply-chain hygiene gap.