sage-grids/php-ai-sdk

Repo bus factorcaution

One contributor made all two recent commits, concentrating maintenance responsibility in a single person; organization backing provides some handoff potential but does not remove the current concentration.

Repo commit activitycaution

Only two commits were recorded in the past three months, indicating limited recent activity for a package that is still releasing.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving automated dependency or code-risk checks unconfirmed.

Security policycaution

The repository has no security policy, so there is no documented path for reporting vulnerabilities or explaining security response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-checkout sinks, but its only action reference is unpinned and it grants top-level write permissions, creating modest build-supply-chain and token-scope concerns.