key-warden/sdk

Usable with caveats: it is a young package with only 32 days of history and all recent repository activity comes from one contributor. Its complete README, tests, license, stable release, and current repository activity provide useful evidence, but the small maintenance base and absent security policy warrant caution.

Latest v1.5.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a thin publishing base, and the repository is user-owned rather than organization-owned, so there is little visible redundancy if that maintainer stops publishing.

Project backing

The repository owner is an individual account, not an organization, and no broader project backing is shown. That makes the single-maintainer evidence more consequential.

Release history

The package is only 32 days old, despite seven releases in that period. Rapid early releases show activity but provide limited evidence of long-term maintenance and maturity.

Repo bus factor

All recent commits came from one contributor, giving the project a bus factor of one. No organization backing is shown to compensate for this concentration.

Repo commit activity

There was one commit in the last three months from one active maintainer, with a push on the assessment date. This is current activity but too sparse to demonstrate sustained maintenance.