inspurcloud/php-oss-sdk

Documentation and packaging are adequate, with no install-time scripts. The artifact identifies both Apache-2.0 and MIT while the manifest declares MIT, and the repository lacks security tooling and a security policy. Maintenance evidence is too weak for a dependable long-term dependency.

Latest 3.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no releases in the last 12 months, and its latest release was in March 2023. Eight total releases show some history, but the long gap is a substantial abandonment concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the registry's lack of recent releases. This leaves little evidence of ongoing maintenance.

License

The package declares MIT and includes license files, but artifact detection also identifies Apache-2.0. The mismatch should be clarified before relying on the package's licensing terms.

Repo popularity

The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counters provide no supporting evidence of an active user or contributor community.

Repo tooling

Composer is used for builds, which supports reproducible package handling, but no security scanning tools are configured. That is a transparency and maintenance gap for a long-lived SDK.