heroshots/sdk
Clear documentation, tests, and a license make integration straightforward. Two active contributors and 11 recent commits help offset the missing security policy and unpinned workflow actions.
70%
Total Score
75
75
50
Health Score Breakdown
The package is only 71 days old and has five releases, all concentrated in its first week, so its longer-term maintenance record is not yet established.
Two contributors are active, but the leading contributor made about 64% of recent commits, leaving maintenance somewhat concentrated.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Version v0.2.3 is a non-major release rather than a stable 1.x release, indicating an API that may still change.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, leaving avoidable supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.5 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.