signnow/api-php-sdk

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap, not evidence of abandonment.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting expectations unclear for an SDK that handles API credentials.

Workflow auditcaution

Both workflows were analyzed successfully and have no untrusted checkouts, injection findings, or write-wide tokens. However, both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.