worldline-acquiring/acquiring-sdk-php

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance concern despite the recent registry release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving an avoidable supply-chain hygiene gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All 4 action references are unpinned and the sole workflow grants top-level write access. The reported cache-poisoning finding has low confidence and is hygiene rather than a standalone severe risk.