taleastromex/keepz-api-sdk

Release historycaution

This is a young package, about 5 months old, with only one release and no demonstrated release cadence. That limits evidence of long-term maintenance but does not indicate abandonment by itself.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, despite the package being only about 5 months old. This is the clearest sign of limited ongoing maintenance.

Repo toolingcaution

Composer is used for builds, providing normal package tooling, but no security scanning tools were detected. The missing scanning reduces maintenance confidence somewhat.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities. This is a hygiene concern rather than evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed, has read-only permissions, and has no untrusted checkout, injection, or audit findings. Both referenced actions are unpinned, leaving a modest build-reproducibility and supply-chain hygiene gap.