vincentauger/sierra-php-sdk

Repo bus factorcaution

One contributor made all commits in the last 3 months, leaving maintenance dependent on a single active person.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating limited recent maintenance activity despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security checks less visible than they could be.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.