logiscape/mcp-sdk-php
The project presents a clear integration path for PHP applications. One active contributor carries all recent commits, and all 15 workflow actions are unpinned, creating maintainability and build-integrity concerns despite strong release documentation.
82%
Total Score
83
100
94
100
Health Score Breakdown
All 53 recent commits came from one contributor, so maintenance depends heavily on a single individual even though the repository is organization-owned.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.
Both workflows were analyzed without audit findings or untrusted triggers, and one uses read-only permissions. However, all 15 analyzed action references are unpinned, which weakens build reproducibility and action supply-chain integrity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^2.0 ||^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.