sb15/php-curl-client

Release historycaution

The latest release was over 3 years ago, with no releases in the last 12 months. Earlier releases were reasonably spaced, but the long current gap raises abandonment risk.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, consistent with a repository that has been inactive since January 2023. This materially increases abandonment risk.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool is configured. That is a transparency and maintenance gap, though it is not evidence of malicious behavior.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection issues, but it has a high-confidence unpinned container-image finding. Unpinned images weaken build reproducibility and supply-chain hygiene.