sonnenglas/dhl-parcel-de-sdk

Release historycaution

The package is young at 106 days and has 28 releases, with a median interval of 0 days; this shows active publishing but also a compressed cadence consistent with a still-maturing project.

Repo popularitycaution

The repository has only 2 stars and no forks, so external adoption evidence is limited; this is a supporting concern rather than a standalone health verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-process gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for a package handling shipping credentials.

Workflow auditcaution

The single workflow is fully analyzed, uses read-only permissions, and has no untrusted triggers or injection findings. However, all 4 of its action references are unpinned, creating a workflow supply-chain hygiene concern.