yangusik/shikimori-api-php

Release historydanger

Only two releases were published, both within about six days in August 2022, with no releases in the following four years. This is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The non-archived repository does not compensate for the lack of recent activity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented. This is a transparency gap, though it is less severe than the inactive maintenance record.

Workflow auditcaution

The only workflow was fully analyzed and had no dangerous triggers or audit findings, but both of its two action references are unpinned. That leaves the build exposed to moving action code and is a modest supply-chain hygiene concern.