nosto/php-sdk
The project has a long release history, current release notes, and a clear license. GitHub Actions audit is clean, but all 25 action references are unpinned and no security policy is published.
68%
Total Score
75
100
67
Health Score Breakdown
All 15 commits in the last 3 months came from one contributor, creating meaningful continuity risk. Organization ownership provides some maintenance capacity, but no second recent contributor is shown.
No repository security policy is published, which weakens vulnerability-reporting transparency for a maintained SDK.
The audit found no untrusted checkouts, script injection, or other reported findings, but all 25 analyzed action references are unpinned, leaving build inputs less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vlucas/phpdotenv Version ^5.6 | — | — |
phpseclib/phpseclib Version 3.0.* | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.