bmcfarlin/worldnet-php-sdk

Release historydanger

This is the package's only release, published about three years ago, with no releases in the last 12 months. That gives little evidence of maintained compatibility or responsiveness.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Although it is not archived, current maintenance activity is absent.

Maintainerscaution

One individual has registry publish access, providing a thin publishing base. The linked repository is also owned by that individual, so there is no organizational backing shown to offset the concentration risk.

Package scaffoldingcaution

The artifact includes a substantial README, which supports consumer use, but the source repository reports no tests. The absence of tests is a real maintenance gap for an SDK, while the missing changelog is normal packaging practice.

Repo toolingcaution

Composer is used for the build, but no security scanning tool is present. This is a hygiene and maintenance concern rather than a severe risk by itself.