scanii/scanii-php

Repo popularitycaution

The repository has only 2 stars and no forks. This is limited supporting evidence, but popularity alone does not outweigh the observed release and commit activity.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. That is a transparency and hygiene gap, though active commits and release notes provide some compensating evidence.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a security-related SDK. This lowers transparency but is not evidence of abandonment.

Workflow auditcaution

Both workflows were analyzed successfully, with no untrusted checkout or script-injection trigger. However, all 4 action references are unpinned, and the audit found a high-confidence template-injection pattern in the release workflow; the template finding is a hygiene concern without a corroborating dangerous trigger.