badpixxel/php-sdk
The package is clearly licensed and the repository matches its name. Its sparse documentation, absent security policy, broad runtime dependency list, and single-contributor activity reduce confidence in long-term maintenance.
67%
Total Score
75
50
92
50
Health Score Breakdown
The package declares 17 runtime dependencies, including PHPUnit, Composer, GrumPHP, and several static-analysis and coding-standard tools; placing development tooling in runtime dependencies increases dependency surface and packaging ambiguity.
The package has existed for over four years with nine releases, but only one release in the last 12 months indicates a modest maintenance cadence.
All seven recent commits came from one contributor, so maintenance depends heavily on a single person despite the recent activity.
The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Splash Sync |
| BadPixxel |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpmd/phpmd Version ^2.6 | — | — |
phpro/grumphp Version ^0.19|^1.0 | — | — |
seld/jsonlint Version ^1.7 | — | — |
j13k/yaml-lint Version ^1.1 | — | — |
phpstan/phpstan Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.