permafrost-dev/dropbox-php-sdk
Clear licensing, tests, release notes, and security reporting improve confidence. The workflow audit finds a high-confidence bot-condition issue and all nine action references are unpinned, so automation hygiene also needs attention.
52%
Total Score
75
88
83
Health Score Breakdown
This is the package's only release, published about 2 years ago, with no releases in the last 12 months. That leaves maintenance continuity unproven despite the stable 1.0.0 version.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with a project that has not shown recent maintenance activity.
The repository has 0 stars, forks, and watchers. Popularity is not decisive by itself, but combined with the single-release history it provides little evidence of sustained community use.
The audit reports a high-confidence bot-conditions finding in a workflow using pull_request_target, and all 9 action references are unpinned. No untrusted checkout or script-injection sink was found, so this is a hygiene concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kunal Varma |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/collections Version ^11.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.