sms77/api

Registry deprecationdanger

The registry marks the entire package as abandoned, which is a substantial adoption concern even though the listed replacement is the same package and the source remains active.

Repo commit activitycaution

No commits or active maintainers were recorded in the three months before collection, which weakens the otherwise positive release history and suggests a recent slowdown.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and handling less transparent for an API client.

Workflow auditcaution

The only workflow uses a pull_request_target trigger, grants top-level write permissions, leaves its action unpinned, and has a high-confidence bot-conditions finding; although no untrusted checkout or script injection was found, this is meaningful workflow hygiene risk.