truckersmp/api-client

Repo toolingcaution

The project uses Composer for builds, but no security-scanning tool was detected. The missing scanner is a modest transparency gap rather than a severe dependency-health risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or high- or medium-severity findings. However, both of its two action references are unpinned, which weakens build reproducibility and action supply-chain control.