onslip/onslip-360-api

The Apache-2.0 license and minimal runtime dependency reduce adoption friction. The organization-backed repository is not archived, but it has had no commits in three months and lacks tests, a README, and security scanning.

Latest 1.37.5

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. The missing README reduces consumer guidance for a PHP SDK, while missing tests and changelog limit transparency about behavior and changes.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, although the recent registry release provides some compensating evidence of ongoing publishing.

Repo popularity

The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these numbers provide little external evidence of broad review or community support.

Repo tooling

The project uses Make and Composer, showing basic build structure, but it has no security scanning tool. That leaves a notable repository hygiene gap for a dependency.

Security policy

The repository has no security policy. This does not prove a security problem, but it weakens transparency about how dependency issues and vulnerability reports are handled.