cme/cme-sdk

Risky to adopt: this stable package has had no release or repository activity since June 2015. Its minimal README and lack of visible project testing make maintenance and integration harder, despite a valid license and organization-backed repository.

Latest 1.0.0

Packagist

34%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only one release, published about 11 years ago, with no releases in the last 12 months. That long period without a new release is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with its last push being about 11 years ago. No newer activity compensates for this gap.

Package scaffolding

The artifact includes a README, but it is only 10 characters long, and the repository reports no tests or changelog. The missing tests and changelog are not packaging defects by themselves, but the extremely limited consumer documentation is a real usability and transparency concern for an SDK.

Repo popularity

The repository has zero stars and one fork, providing little evidence of broad community use or external review. Popularity is only supporting evidence, so this reinforces rather than determines the maintenance concern.

Security policy

The repository has no security policy. This is a transparency gap, although the absence of active workflows and the package's age limit the practical significance of this finding.