inventorai/sdk
The package includes a substantial README, unit tests, a license, and no install-time scripts. Its repository is active but has no security policy, security scanning, or established community track record yet.
64%
Total Score
100
81
75
Health Score Breakdown
The package was first released today and all five releases appeared on the same day, so there is not yet enough history to demonstrate sustained maintenance or release stability.
The repository has zero stars, forks, and watchers. Because the package is only hours old, this is weak evidence rather than a strong abandonment signal, but it provides no external maturity support.
Composer build tooling is present, but no security-scanning tool was detected. For a newly published SDK this leaves a meaningful transparency and assurance gap.
The repository has no security policy, so users have no documented reporting process or security contact. This lowers transparency but is not by itself evidence that the release is unsafe.
No GitHub Actions workflows were present to audit, so there are no detected workflow findings, but this also provides no workflow-based build or release assurance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Inventorai |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.0 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 hours ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.