crowdhandler/sdk

This is a usable, actively published stable package with a BSD-3-Clause license, a non-archived organization-backed repository, recent release activity, and no install-time lifecycle scripts. However, maintenance depth and transparency are limited: only one contributor made one commit in the last three months, the repository has no tests, changelog, security policy, or security scanning, and the repository has negligible public adoption. The recent release and two merged pull requests provide meaningful evidence of ongoing activity, but the thin recent contributor base warrants caution before adopting it for a critical dependency.

Latest 1.0.10

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A substantial README documents API usage, but neither the artifact nor repository contains tests or a changelog. The documentation is useful, yet the absence of both testing and release-history documentation reduces maintenance transparency.

Repo bus factor

All three-month commit activity is concentrated in one contributor with a 100% share. Organization ownership provides some potential handoff capacity, but no second recently active contributor is evidenced.

Repo commit activity

Only one commit was made in the last three months by one active maintainer. Recent release activity offsets this somewhat, but the low commit volume is a genuine maintenance-capacity concern.

Repo popularity

The repository has 0 stars, 1 fork, and 0 watchers, indicating very limited visible adoption. Popularity is supporting evidence rather than decisive, but this provides little external validation.

Repo tooling

Composer is used as a build tool, which is appropriate for a PHP package, but no security scanning tooling is present. The missing scanning is a transparency gap rather than a standalone health failure.