Package Health/biglysales/evernote-thrift-sdk

biglysales/evernote-thrift-sdk

The artifact is a focused, generated SDK with a clear README, modest dependencies, and organization backing. Its install scripts and absent security policy add maintenance overhead, while the licensing mismatch should be resolved before adoption.

Latest 1.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

A LICENSE file is present and the repository also has one, but the manifest declares MIT while the artifact license is detected as BSD-2-Clause. That mismatch needs clarification before relying on the package.

Lifecycle scripts

Both post-install-cmd and post-update-cmd scripts run during dependency operations. Install-time behavior increases supply-chain and maintenance exposure compared with a package that only ships generated files.

Release history

This is the only release, published 565 days ago, with no releases in the last 12 months. That limited history and lack of follow-up reduce confidence in ongoing maintenance.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with the release being a one-time snapshot but still evidence of no current maintenance.

Repo tooling

Composer is used as a build tool, supporting the package's PHP distribution. No security scanning tool was observed, which is a minor transparency gap for a package with install scripts.