chancegarcia/box-api-v2-sdk
PHP SDK and API client for the Box API v2024.0, supporting OAuth2 and JWT/S2S authentication, file and folder operations, uploads, webhook signature verification, typed models, and PSR-3 logging.
35%
Total Score
50
81
67
Health Score Breakdown
Packagist marks the entire package as abandoned and names chancegarcia/php-box-sdk as its replacement. This is a major maintenance and adoption risk for a new dependency.
Only one registry publishing account is listed, and project backing identifies an individual repository owner rather than an organization. This leaves a thin apparent maintainer base.
The repository recorded zero commits and zero active maintainers in the last 3 months. Despite recent release activity, this weakens evidence of active maintenance.
The linked repository name does not match the package name and its README does not mention this package. That raises concern that the repository may not clearly correspond to the published package.
The repository has no security policy. For an SDK handling Box authentication and API credentials, that is a transparency and support gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 chance garcia |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3 | — | — |
symfony/dotenv Version ^7.4|^8 | — | — |
guzzlehttp/psr7 Version ^2.0 | — | — |
monolog/monolog Version ^3.0 | — | — |
symfony/console Version ^7.4|^8 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.