retrofit-php/retrofit-php-core

Repo bus factorcaution

One contributor made all two commits in the last three months. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only two commits were recorded in the last three months, indicating limited observed maintenance activity for a package that is still relatively new.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-severity findings, and its pull_request_target trigger has no untrusted checkout or script-injection sink. However, its one action reference is unpinned, which is a workflow hygiene risk.