twikey/twikey-api-php

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.

Version stabilitycaution

Version 0.7.0 is not a stable major release, which leaves more API-change risk than a 1.x release. It is not marked prerelease and recent prereleases are absent, limiting the concern.

Workflow auditcaution

The single workflow was fully analyzed with no injection findings and no excessive top-level permissions, but all three action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain control.