daniel-jorg-schuppelius/orgamax-php-sdk
Documentation and tests make integration easier, while the MIT licensing is clear. Pin the three workflow actions and add a security policy as the project matures.
82%
Total Score
100
100
94
75
Health Score Breakdown
The repository has 0 stars, forks, and watchers. Given the package's 54-day age, this is weak supporting evidence rather than a standalone health concern.
The repository has no SECURITY.md or other security policy. For an SDK handling authentication and business data, this is a transparency gap, although it does not by itself indicate abandonment.
The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkouts, injection findings, or auditor findings. However, all 3 action references are unpinned, leaving a reproducibility and workflow supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Joerg Schuppelius |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 dschuppelius/php-common-toolkit Version ^1.20 || ^2.0 | — | — |
daniel-jorg-schuppelius/php-api-toolkit Version ^2.8 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.