friendsofhyperf/openai-client
The project has a regular release history, clear licensing, a matching repository, and organization backing. Pin workflow actions and account for the lack of recent commits and security scanning before adopting it.
70%
Total Score
75
100
94
88
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last 3 months. The same-day release and broader release history partly compensate, but current source-level activity is still quiet.
Composer is used for the build, but no security scanning tools were detected. For a client handling API integrations, this is a modest process gap rather than evidence of an unsafe release.
Both workflows were analyzed without audit findings or untrusted checkouts, and the pull_request_target trigger has no detected sink. However, both action references are unpinned, leaving avoidable dependency-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 huangdijia |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 hyperf/di Version ~3.2.0 | — | — |
hyperf/config Version ~3.2.0 | — | — |
hyperf/guzzle Version ~3.2.0 | — | — |
openai-php/client Version >=0.10.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.