toneflix-code/kudi-sms-php

Release historycaution

The package has made seven releases since February 2024, but none in the last 12 months; the latest release was about 14 months ago, suggesting maintenance has slowed.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This is a meaningful maintenance warning, although the latest release indicates the project was active previously.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That limits evidence of automated vulnerability oversight for a library handling messaging credentials.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it does not by itself make the release unfit.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkouts or script-injection findings. However, all three referenced actions are unpinned, leaving avoidable build reproducibility and supply-chain hygiene risk.