signiflow/connect-php-sdk

Release historycaution

This is a single-release package first published in July 2021, with no releases in the last 12 months. That long period without updates is a meaningful maintenance concern.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, consistent with the registry's long release gap and raising abandonment risk.

Repo toolingcaution

Composer build tooling is present, supporting reproducible project structure, but no security scanning tools were detected. The latter is a modest transparency gap for a maintained dependency.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The only workflow was fully analyzed and has no dangerous triggers or audit findings, but both of its two action references are unpinned, leaving them exposed to upstream tag changes.