stefanak-michal/thingsdb-php

Release historycaution

The package has only 3 releases across about 2 years and 6 months, with 1 release in the last 12 months. This indicates a slow release cadence, though it is not by itself evidence of abandonment.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. That recent inactivity lowers confidence in ongoing maintenance, despite the newer repository push timestamp.

Repo popularitycaution

The repository has 3 stars and 1 fork, so there is little evidence of broad community adoption or external review. Low popularity is supporting caution rather than a verdict by itself.

Security policycaution

No security policy was found in the repository. For a network client handling authentication and tokens, this leaves vulnerability-reporting expectations unclear.

Workflow auditcaution

Both workflows were analyzed successfully, with no untrusted checkout or script-injection path and no broad top-level write permissions. However, all 4 action references are unpinned and the high-confidence audit found a floating container image using the latest tag, creating avoidable build-integrity risk.