bugban/php-sdk

This is a usable but very young package with a stable v1.7.1 release, active recent development, a clear README, minimal runtime dependencies, and no deprecation or install-time lifecycle scripts. However, it has only been published for 55 days, has no tests or changelog in either the artifact or repository, has no security scanning or security policy, and the repository has no observed popularity; these transparency and maturity gaps warrant caution for a monitoring SDK that may handle application and user context. The two-contributor activity and recent repository push provide meaningful maintenance evidence, but the package is not yet as mature or independently validated as a low-risk long-term dependency.

Latest v1.7.1

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A substantial README is present, but neither the artifact nor repository contains tests or a changelog. For an SDK handling exceptions, requests, and user/session context, the missing validation and release documentation are meaningful maturity gaps.

Project backing

The repository is owned by an individual account rather than an organization. This is not inherently unhealthy, but it means the small contributor base has less visible organizational backing to absorb maintainer loss.

Release history

The package is only 55 days old but has 14 releases, with a median interval of about 5 hours. This shows active publishing, though the short history limits evidence of long-term stability and the rapid cadence may indicate an immature release process.

Repo issue activity

There are no open issues or pull requests and no recent issue or pull-request activity. This is not inherently negative for a young package, but it provides little evidence of community review or support.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is not required for health, but this provides no external adoption signal and is consistent with the package's very short history.