avadaneidanut/sapphp
The package has a clear README, MIT licensing, and no install-time scripts, which make its contents understandable and its installation relatively predictable. Its pre-1.0 status and absent security policy leave limited support and assurance for a dependency.
32%
Total Score
0
75
75
Health Score Breakdown
Only two releases were published, both in April 2016, with no releases in the last 12 months. That long absence of release activity is strong evidence of abandonment for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in September 2016. This indicates that maintenance has effectively stopped for about 10 years.
Composer is used for builds, which is appropriate, but no security scanning tools are configured. That is a modest assurance gap for a package with no recent maintenance.
The repository has no security policy. This is a transparency and response-process gap, though it is less serious than the demonstrated maintenance inactivity.
The latest version is v0.1.1 and the package has not reached a stable major release. This increases compatibility uncertainty, although the main concern is the much longer lack of maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Avadanei Danut |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psy/psysh Version ^0.7.2 | — | — |
sabre/xml Version ^1.4 | — | — |
illuminate/support Version 5.2.* | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.