kuser/sp-api-sdk

Release historydanger

The package has had no release in about three years and none in the last 12 months, despite 45 releases concentrated at its start. This is substantial evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release pause and indicating no current maintenance capacity.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These are not inherently unsafe, but they add installation behavior that should be understood before adopting a stale dependency.

Security policycaution

The linked repository has no security policy. This is a transparency gap for an SDK that handles marketplace API access, although dependabot scanning provides some compensating security tooling.

Version stabilitycaution

The assessed version is 5.0.8, while the collected latest version is 4.0.13; the release is not marked prerelease, but this version discrepancy reduces confidence in current registry metadata.