disruptiveadvertising/circle-so-api-php-sdk
The repository includes tests, documentation, and matching ownership, while the release is licensed and not deprecated. Recent release activity is offset by no commits or active maintainers in the last three months, and all 11 workflow actions are unpinned.
72%
Total Score
75
100
88
75
Health Score Breakdown
The repository recorded zero commits and zero active maintainers during the last three months. The recent release is positive, but this lack of ongoing development lowers maintenance confidence.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.
Version 0.3.5 is not a prerelease, but the package remains below 1.0, so API stability is less established than for a stable-major release.
The single workflow was fully analyzed with no untrusted checkouts or injection findings, but all 11 action references are unpinned, weakening build reproducibility and update control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adro Morelos |
| Adam Haining |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0|^2.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
php-http/discovery Version ^1.12 | — | — |
php-http/client-common Version ^2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.