villaflor/taboola-sdk

Release historycaution

Only two releases span about five years, with a median interval of roughly four years and one release in the last 12 months; this indicates an unusually sparse maintenance cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent release.

Repo toolingcaution

The repository uses Composer but has no detected security-scanning tools, leaving automated security coverage unconfirmed.

Security policycaution

No repository security policy is present, reducing transparency about how vulnerabilities are reported and handled.

Workflow auditcaution

The workflows have no unsafe trigger or injection findings, but all six action references are unpinned, weakening build reproducibility and update control.