securetrading/ioc

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a maintenance caution, though the recent release and repository push partly compensate for the quiet interval.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a small library this is a limited disclosure-process gap, but it reduces transparency around vulnerability reporting.