algolia/algoliasearch-client-php

Dangerous workflowscaution

One of two workflows uses pull_request_target, which warrants review, but there are no untrusted checkouts or script-injection findings, limiting the concern.

Repo issue activitycaution

There are 16 open issues and 5 open pull requests, with one issue opened and one closed in the last month; this shows ongoing issue handling but limited recent pull-request throughput.

Security policycaution

No SECURITY.md or equivalent security policy was found, leaving vulnerability-reporting guidance less transparent despite the repository's active maintenance and Codacy scanning.

Token permissionscaution

One workflow lacks top-level token permissions, while no workflow requests top-level write access and another declares read-only permissions; this is a modest permissions-hygiene gap rather than a severe risk.