setono/peak-wms-php-sdk

Release historycaution

The package has had no releases in the last 12 months, and its latest release was in April 2025. Earlier releases were regular, but the recent pause raises maintenance risk.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This supports the release-history concern and leaves current maintenance unverified.

Security policycaution

The linked repository has no security policy. This weakens transparency for reporting and handling vulnerabilities, although it does not by itself show that the package is abandoned.

Workflow auditcaution

All 21 analyzed action references are unpinned, and a high-confidence template-injection finding was reported in the backwards-compatibility workflow. No untrusted checkout or script-injection sink was found, so these are workflow hygiene concerns rather than a severe standalone risk.