retailcrm/api-client-php

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This weakens automated assurance, though it does not by itself indicate abandonment.

Security policycaution

The repository has no security policy. That reduces transparency about vulnerability reporting and response, but the active organization-owned project provides some compensating maintenance context.

Workflow auditcaution

All 15 action references are unpinned, which weakens build reproducibility, and a high-confidence unsound condition was found in documentation workflow; the two low-confidence cache findings are hygiene concerns only. Workflows were fully analyzed and had no untrusted checkouts or script injection.