tmoh/nimba-sms

Project backingcaution

The repository is owned by an individual account rather than an organization, so the one-account publishing model has no visible organizational backing to compensate for the thin maintenance evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a young package.

Repo popularitycaution

Two stars and no forks show very limited external adoption or review. Popularity is supporting evidence rather than a verdict, but it provides little resilience against abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented for a package that handles SMS service credentials.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both of its two action references are unpinned, leaving avoidable supply-chain hygiene risk.