An OpenFeature provider for the LaunchDarkly PHP server SDK
72%
Total Score
100
100
89
100
The package has only two releases and no registry release in the last 12 months, which limits evidence of release continuity, although repository activity provides some compensation.
Version 1.0.0 is a stable, non-prerelease release, though the README warns that the beta API may still introduce breaking changes.
All five workflows were analyzed with no audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. Six of seven action references are unpinned, which is a reproducibility and workflow-supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
myclabs/php-enum Version >1.8 | — | — |
open-feature/sdk Version ^2.0 | — | — |
guzzlehttp/guzzle Version ^7 | — | — |
launchdarkly/server-sdk Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.