The package has a clear MIT license, useful README, and no install-time scripts. Its small repository footprint and lack of security scanning leave less evidence for ongoing upkeep.
60%
Total Score
50
100
88
83
The repository is owned by an individual user rather than an organization, so the single-contributor maintenance concern is not offset by visible organizational backing.
The package is 330 days old but has only one release, so there is little release history to demonstrate sustained maintenance.
All recent repository activity comes from one contributor, leaving maintenance dependent on a single individual with no demonstrated handoff capacity.
There was one commit in the last three months, showing some recent activity but only limited evidence of active development.
Composer is used for builds, but no security-scanning tooling was detected, reducing transparency around automated security checks.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
apollo-sdk/config Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.