setono/client

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release partly offsets this, but the quiet period lowers confidence in continuing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and disclosure expectations less transparent.

Workflow auditcaution

All 18 analyzed action references are unpinned, and the audit found a high-confidence template-injection issue; the issue has no pull_request_target or workflow_run trigger corroboration, so these are workflow hygiene concerns rather than standalone severe risk.