transloadit/php-sdk

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, partly offset by the recent push and the release history.

Repo toolingcaution

The project uses Make and Composer, showing build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap.

Security policycaution

No repository security policy was found. This weakens disclosure transparency, but it is not by itself evidence that the package is unsafe to depend on.

Workflow auditcaution

All workflows were analyzed without untrusted triggers or script-injection findings. However, the audit found a high-confidence low-severity ad hoc package installation and two of four action references are unpinned, creating modest reproducibility and workflow hygiene concerns.