allstak/sdk-php

Clear documentation, a license, repository tests, and release notes make the package transparent. Its short history and no commits for roughly four months leave maintenance capacity unproven, while workflow references are not pinned.

Latest v1.4.0

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package is only 123 days old, with six releases concentrated in its first 12 months and a median interval of about 20 hours. This shows initial activity but provides little long-term maintenance evidence.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. For a package this young, that leaves ongoing maintenance capacity uncertain.

Repo popularity

The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, but does not by itself make a small, maintained package unsafe to adopt.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The repository's security policy partly compensates by documenting a reporting process.

Workflow audit

Both workflows were analyzed successfully with no untrusted checkouts, script injection, or high-confidence audit findings. However, all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.