sentroy-co/client-sdk

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite the recent release-era push. That is a meaningful warning about current maintenance capacity.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of adoption signals provides little outside validation for this young package.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools were detected. For an SDK handling authentication and API access, this is a modest repository hygiene gap.

Security policycaution

The repository has no security policy. That weakens disclosure transparency for a package that handles access tokens, although it does not by itself show an active security problem.

Workflow auditcaution

All seven analyzed action references are unpinned, so workflow dependencies can change without a repository commit. One workflow has top-level write permissions, but job-level permissions are used in another and no untrusted checkout or injection was found.