Package Health

lichi/vault-sdk

The package has a clear MIT license, a README, and no install-time scripts. Its only release was over two years ago, with no recent issue activity and no security policy, so maintenance risk remains substantial.

Latest 1.0.0PackagistPackagist

48%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

70

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

There has been only one release, published about two years and eight months ago, with no releases in the last 12 months. This is strong evidence of limited ongoing maintenance for a dependency.

Repo issue activitycaution

The repository has no open issues or pull requests and recorded no issue or pull-request activity in the last month. This provides no evidence of an active maintenance channel, though the project may simply be very small.

Repository archivedcaution

The repository is not archived, which avoids an explicit abandonment marker, but its last push was about two years and eight months ago and does not offset the stale release history.

Security policycaution

The linked repository has no security policy. For an SDK that handles access to Vault, this is a meaningful transparency and incident-response gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ivan Okhotnikov

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ~7

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform