yatmo/yatmo-php

Release historycaution

The package is newly published, with three releases all arriving within the same day. This shows active initial publishing but provides little evidence of longer-term maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the measured three-month period. Because the repository is newly created, this is partly expected but still leaves long-term maintenance unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, making vulnerability-reporting expectations and response procedures less transparent.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned. That creates avoidable build-integrity risk without evidence of an exposed write-capable token.