norkunas/onesignal-php-api
The project has a long release history, clear documentation, tests in the repository, and a release for this version. Recent development is quiet, and all 12 workflow actions are unpinned; there is also no security policy.
70%
Total Score
75
100
88
83
Health Score Breakdown
Two registry publishing accounts are present. This is limited publishing redundancy for a user-owned project, but the repository and release activity provide additional backing evidence.
The package has existed for about 11 years with 62 releases and a recent release, supporting maturity. Only one release in the last 12 months indicates a slower current cadence.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful sign of currently quiet maintenance.
Composer is used for builds, but no security scanning tool is configured. This is a maintenance and transparency gap, though it is not evidence of a vulnerable release by itself.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tomas Norkūnas |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
symfony/options-resolver Version ^4.4|^5.0|^6.0|^7.0|^8.0 | — | — |
symfony/deprecation-contracts Version ^2.1|^3.0 | — | — |
psr/http-client-implementation Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.