gwinn/boxberry-sdk
The package has a clear MIT license, tests, a useful README, release notes, and a source repository that matches it. Maintenance has been quiet since August 2025, and all 10 workflow action references are unpinned with no security policy documented.
61%
Total Score
50
83
67
Health Score Breakdown
The registry namespace and repository owner are the same individual account, providing direct ownership alignment but no organizational backing or larger maintenance base.
The latest release was August 21, 2025, with no releases in the last 12 months. That long gap lowers confidence in ongoing maintenance, despite seven releases overall.
There were zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating currently inactive development.
The repository has zero stars, two forks, and one watcher. This is limited supporting evidence of adoption, but it is not by itself a maintenance verdict.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of unsafe code.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alexander Lushpai |
| Vladimir Kolchin |
| Angelina Pekhova |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jms/serializer Version ^1.1|^3.28 | — | — |
psr/http-client Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^6.5 | — | — |
symfony/validator Version * | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.