upsun/upsun-sdk-php

Repo bus factorcaution

One contributor made all recent commits, creating a concentrated maintenance path; organization backing provides some ability to hand work to others.

Repo commit activitycaution

Only one commit was recorded in the last three months, which suggests maintenance has slowed despite the repository remaining active.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

The package is not yet at a stable major version, so its APIs may change; the release is not marked as a prerelease, which partly offsets that concern.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkout or script-injection findings, but 15 of 17 action references are unpinned and one workflow installs a package outside a lockfile.