streamx/ingestion-client-php

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The earlier release history provides some compensation, but the current inactivity raises maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a gap in the project's automated security hygiene.

Security policycaution

The repository has no security policy, making vulnerability reporting and handling less transparent for users of this client library.

Workflow auditcaution

The sole workflow has a high-confidence template-injection finding and both of its action references are unpinned. The audit found no untrusted checkout or script-injection trigger, so this is a workflow-hygiene caution rather than a severe dependency verdict.