qase/qase-api-v2-client

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance activity concentrated. Organization ownership provides some handoff capacity but does not remove the current concentration.

Repo commit activitycaution

Only two commits were recorded in the last three months, which is light activity for a maintained package, though the recent release history shows the project still publishes regularly.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, which weakens build reproducibility and supply-chain control.