Package Health

dreamfactory/azure-documentdb-php-sdk

The small, focused codebase has tests, a changelog, clear licensing, and organization backing. Its last registry release was in 2017 and there has been no commit activity in the past three months, so maintenance should be treated as limited.

Latest 0.2.1PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has only three releases, with the latest on July 5, 2017 and none in the last 12 months. This is substantial evidence of stale maintenance for a dependency intended to track a cloud service.

Repo commit activitycaution

There were zero commits and zero active maintainers in the past three months. Combined with the old release history, this is a meaningful maintenance and abandonment concern.

Repo toolingcaution

The repository uses Composer, which is appropriate for a PHP package, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the release is unsafe.

Security policycaution

No repository security policy was found. That reduces transparency for reporting and handling security issues, though it is less serious for this small, focused SDK than evidence of abandonment.

Version stabilitycaution

Version 0.2.1 is not a prerelease, but it remains below a stable 1.0 major release. That modestly limits maturity confidence, while the absence of prereleases is a compensating positive.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Lee Hicks
Arif Islam

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
9 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform