devmatchable/whop-php-sdk
Usable with caveats: the package is clearly backed by a matching organization repository, has tests, documentation, licensing, and a security policy. It is still an immature 0.0.1 release with no commits or active maintainers in the last three months and limited repository security hardening.
65%
Total Score
75
100
75
88
Health Score Breakdown
This is the package's only release, published about 125 days ago, so there is little release history to demonstrate long-term maintenance or stability.
The repository recorded zero commits and zero active maintainers during the last three months. For a package only about four months old, this is a meaningful warning about stalled maintenance.
The repository has no stars, forks, or watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the limited maintenance history.
Composer build tooling is present, but no repository security-scanning tools were detected, leaving a security-process gap for an SDK handling API integrations.
The repository's only workflow lacks top-level token permissions. No write permissions were observed, but explicit least-privilege settings would provide stronger CI hardening.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tolu Tourialai |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
php-http/discovery Version ^1.19 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 4 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.