freeloapp/php-sdk

This is a healthy, actively maintained release with a clear MIT license, stable v2.4.0 status, regular release cadence, a non-archived matching repository, recent commits from two active contributors, merged pull requests, repository tests and changelog coverage, and a security policy. The main reservations are the single registry maintainer account, very low repository popularity, absent dedicated security-scanning tools, and GitHub Actions workflows with broad or unspecified token permissions plus one untrusted checkout; these are meaningful hygiene risks but do not outweigh the strong maintenance and project-structure evidence.

Latest v2.4.0

Packagist

84%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health checks

Dangerous workflows

No pull_request_target or script-injection workflows were found, but one workflow uses an untrusted checkout, creating a workflow-hygiene concern.

Maintainers

Only one account has registry publish access, which limits publishing redundancy. However, the repository shows two active maintainers and frequent releases, so this is a caution rather than a severe maintenance concern.

Project backing

The repository is owned by a user account rather than an organization, so there is no observed organizational handoff capacity to offset the small maintainer base.

Repo popularity

The repository has only 1 star and 1 fork, so there is little external adoption evidence. Popularity is supporting evidence only, and the strong release and maintenance activity offsets this limitation.

Repo tooling

The repository uses Make and Composer build tooling, but no security-scanning tools were detected, leaving a security-process gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Freelo Bay s.r.o.

Direct Dependencies

Dependency	Last Release	Score
psr/http-client Version ^1.0	—	—
psr/http-factory Version ^1.0	—	—
psr/http-message Version ^1.0\|^2.0	—	—
psr/simple-cache Version ^2.0\|^3.0	—	—
php-http/discovery Version ^1.19	—	—