calvery/sdk

The small source tree and lack of automated tests or a security policy leave limited evidence of maturity. The package is licensed, has a usable README, no install scripts, and its repository is active rather than archived, but its maintenance record is still thin.

Latest v0.3.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README, which helps consumers integrate it, but neither the package nor repository provides tests or a changelog. Missing tests and changelogs are not packaging defects by themselves, though the lack of repository tests reduces maintenance evidence.

Release history

This package has only one release over its 155-day lifetime, so there is little history showing sustained maintenance or compatibility practices.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, despite the package being only 155 days old; that weakens evidence of ongoing support.

Repo tooling

Composer is used for the build, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than a severe risk.

Security policy

The repository has no security policy, leaving no documented route for reporting vulnerabilities in a secret-management SDK.