signalwire-community/signalwire

Release historycaution

The package has 27 releases since September 2018, but its latest release was over three years ago and it had no releases in the last 12 months. This is a meaningful maintenance concern.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with no registry releases in over three years, this points to weak current maintenance.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

No security policy was found in the repository. For a communications SDK, this makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

The only workflow was fully analyzed with no reported audit findings or untrusted checkout and injection sinks, but all three action references are unpinned. That weakens build reproducibility and update control.