swisnl/json-api-client

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the past three months. This is a real maintenance concern, although the package had a recent release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That weakens automated security hygiene without indicating that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All three workflows were analyzed with no dangerous triggers, sinks, or audit findings. However, all 9 action references are unpinned and one workflow grants top-level write permissions, creating moderate reproducibility and least-privilege concerns.