boxalino/boxalino-client-sdk-php
The repository is still available, organization-backed, and includes a usable README with a small dependency set. Its proprietary license and absent security scanning add adoption constraints beyond the stale maintenance record.
40%
Total Score
50
100
58
75
Health Score Breakdown
The package has had no release in more than five years, despite eight releases overall and a previously regular median interval of about five months. This is a substantial maintenance concern.
There were no commits and no active maintainers in the last three months, consistent with the release history showing that maintenance has effectively stopped.
The manifest declares a proprietary license, so the release is licensed, but its terms may restrict redistribution or use compared with a typical open-source dependency.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
The linked repository is not archived and is owned by the same organization as the package, which provides some evidence of continued project ownership. However, its last push was in March 2021.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sylvain Paillard |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 apache/thrift Version 0.10 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.