Package Health

dapr/php-sdk

Dapr Implementation in PHP

Latest v1.2.0PackagistPackagist

55%

Total Score

caution

Usable with caveats: nearly five years without a release outweighs otherwise solid documentation and project backing.

Health Score Breakdown

Release historydanger

The package has eight releases but none in the last 12 months; its latest registry release was nearly five years ago. This is a significant maintenance and abandonment concern for a dependency.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. This recent absence of implementation activity reinforces the stale release history.

Dependency profilecaution

The package declares 16 runtime dependencies, including several framework and HTTP components, which increases the maintenance surface but is plausible for an SDK of this scope.

Licensecaution

The artifact declares MIT and includes a license file, but the detected license text is Apache-2.0, creating a material license inconsistency despite the repository also containing a license file.

Repo issue activitycaution

The repository has new issues and pull requests in the last month, but none were closed or merged, indicating limited visible resolution activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Rob Landers

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.1
—
—
nyholm/psr7
Version ^1.3
—
—
php-di/php-di
Version ^6.3
—
—
php-di/invoker
Version ^2.3
—
—
monolog/monolog
Version ^2.2
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform