webapix/mygls-sdk

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The same-day package release and repository push provide some counterevidence, but the recent development history is still quiet.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a package that handles API requests, although it does not by itself indicate that the release is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but both of its two action references are unpinned. That leaves avoidable workflow supply-chain exposure.