zimbra-api/upload-api

Release historycaution

The package has 9 releases since August 2022, but none in the last 12 months; its latest release was over two years ago, indicating stalled maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the broader absence of releases for over two years and raising abandonment risk.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow audit completed fully and found no security findings, with read-only permissions used; however, both analyzed action references are unpinned, which weakens build reproducibility.