oktocode/sham-cash-sdk
The repository includes tests, a changelog, a security policy, and a clean workflow audit. Its small dependency set and MIT license are reassuring, but ongoing maintenance is not yet demonstrated.
62%
Total Score
75
100
88
83
Health Score Breakdown
The package was first released today and has only two releases, so there is not enough history to demonstrate sustained maintenance.
There were zero commits and zero active maintainers in the past three months. Because the repository was created and released today, this is not proof of abandonment, but maintenance is not yet demonstrated.
Composer build tooling is present, but no security scanning tools were detected. This is a modest process gap rather than a severe concern for a new package.
The single workflow was fully analyzed with no high- or medium-severity findings, no untrusted checkout, and no script injection. Both action references are unpinned, which is a mild reproducibility and supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^2.0 || ^3.0 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
Weekly Downloads
Info
- Last Published
- 2 hours ago
- Created
- 3 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.