comfino/php-api-client

This release appears generally suitable to depend on: it is a stable, non-deprecated 3.3.0 release with nine releases in 148 days, a substantial documented codebase, tests, changelog, CI workflows, a license, and organization backing from Comfino. The main concerns are that repository commit activity reports no commits or active maintainers in the last 3 months despite the recent release, and the repository lacks a security policy and explicit top-level GitHub Actions token permissions. These are meaningful transparency and maintenance-process gaps, but they do not outweigh the strong release, scaffolding, licensing, and repository-alignment evidence.

Latest 3.3.0Packagist

Health Score Breakdown

Repo commit activitycaution

The repository reports zero commits and zero active maintainers over the last 3 months, which is a maintenance concern; the very recent release and push provide some counter-evidence but do not fully resolve the mismatch.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest security-process gap.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.

Token permissionscaution

All three workflows lack top-level token permissions declarations. No workflow requests top-level write access, but explicit least-privilege configuration is still absent.

View all 17 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Artur Kozubski

Direct Dependencies

Dependency	Last Release	Score
psr/http-client Version ^1.0	—	—
psr/http-factory Version ^1.1	—	—
psr/http-message Version ^1.1 || ^2.0	—	—