tapsilat/tapsilat-php

Repo bus factorcaution

All eight recent commits came from one contributor, creating a real continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented for an API client.

Workflow auditcaution

All 11 action references are unpinned, and the audit found high-confidence template-injection and archived-action findings; no untrusted checkout or script-injection trigger was found, so this is workflow hygiene risk rather than a severe standalone defect.