thinkinggame/ta-php-sdk

Licensecaution

The artifact contains a license file and the repository also has one, but the manifest declares MIT while the detected artifact license is Apache-2.0; that mismatch reduces transparency.

Repo bus factorcaution

All 3 recent commits came from one contributor, giving the project a complete short-term contributor concentration and increasing continuity risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the link may not clearly establish that the repository publishes this SDK.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected; this is a modest repository hygiene gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving the process for reporting and handling vulnerabilities undocumented.