senet-eindhoven/azure-keyvault-php

Release historydanger

The package has had no registry release in about four years, with only three releases overall; this is a meaningful maintenance and abandonment concern.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, reinforcing the concern raised by the long gap since the latest registry release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version 0.2.0 is not a stable major release, so the API may still change; the presence of release notes provides some evidence of deliberate versioning but does not remove that risk.

Workflow auditcaution

All 10 analyzed action references are unpinned, which weakens build reproducibility. The audit also failed for one file, although it found no untrusted checkout, script injection, or high-severity findings.