orchesty/php-sdk
The package has a clear license, tests, a useful README, and organization backing. Releases remain regular, but repository commits stopped for six months and all three workflow actions are unpinned. No security policy adds a smaller transparency concern.
67%
Total Score
75
94
75
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months, leaving roughly six months without observed source commits. Regular registry releases partly offset this, but the gap still lowers maintenance confidence.
The project uses Make and Composer, showing a defined build workflow, but no security scanning tools were detected. This is a modest repository hygiene gap rather than evidence of abandonment.
No repository security policy was found. For an SDK that handles authorization and API credentials, this weakens transparency around vulnerability reporting.
The workflow audit completed cleanly, uses read-only permissions, and found no dangerous triggers or audit findings. However, all 3 action references are unpinned, which leaves the build exposed to upstream action changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^8.0 | — | — |
league/oauth2-client Version ^2.9 | — | — |
symfony/monolog-bundle Version ^4.0 | — | — |
hanaboso/commons-bundle Version ^3.0 | — | — |
hanaboso/mongo-data-grid Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.