ikarus/sps-client

The package is small and easy to inspect, with a focused dependency profile, tests, usage documentation, and an MIT license. Its lack of security policy or scanning leaves vulnerability response dependent on a project with little visible activity.

Latest v0.2.2

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in July 2020, with no releases in the last 12 months despite the package being over six years old. This is strong evidence of abandonment risk, although the package has eight historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release gap and indicating no recent maintenance capacity.

Repo popularity

The repository has zero stars and forks and only one watcher, providing little supporting evidence of community adoption or outside oversight. Popularity is not decisive for a small package, but it does not offset the inactivity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. That weakens automated oversight, though the small 21-file codebase limits the significance of this gap.

Security policy

The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities. This is a meaningful transparency gap for a network- and socket-facing client.