stadiamaps/api

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The same-day release and push show recent publishing, but do not demonstrate sustained development activity.

Repo popularitycaution

The repository has one star, zero forks, and two watchers. Low usage reduces supporting evidence of maturity, though popularity is not decisive for a small SDK.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a modest transparency and maintenance gap, not evidence of malicious behavior.

Security policycaution

The repository has no security policy file. For an SDK that handles API credentials and network requests, this weakens vulnerability-reporting transparency.

Workflow auditcaution

All workflows were analyzed with no audit findings, read-only permissions, and no untrusted checkout or script-injection paths. However, the single action reference is unpinned, leaving a minor reproducibility and supply-chain hygiene gap.