apistd/uni-sdk

The README, MIT license, and small dependency set make the package straightforward to inspect, and its organization-owned repository is still available. Low adoption and the lack of repository security tooling provide little additional reassurance.

Latest 0.1.0

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in about five years, with eight releases overall and none in the last 12 months. That is strong evidence of stagnation for an SDK dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the old last push, this materially increases abandonment risk.

Repo popularity

Two stars and two forks indicate very limited adoption and provide little community validation. Popularity is supporting evidence rather than a verdict, so this is a modest concern.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and response-readiness gap, not evidence of malicious behavior.

Version stability

The latest version is still 0.1.0, so the API may not have reached a mature stable major release. This reinforces the maintenance concern, although it is not a deprecation signal by itself.