saade/z-api-php-sdk

Maintainerscaution

One registry maintainer is consistent with an individually owned project, but it provides a thin publishing base and little redundancy if the maintainer becomes unavailable.

Release historycaution

This is the only release, published 508 days ago, with no releases in the last 12 months. That leaves little evidence of sustained maintenance or compatibility follow-through.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. Although it was pushed recently, the measured activity suggests limited ongoing development.

Workflow auditcaution

All 9 action references are unpinned, and 3 of 4 workflows grant top-level write access. The audit also found a high-confidence bot-condition issue; the pull_request_target workflow has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe workflow risk.