Usable with caveats: the package is actively published, documented, tested, and backed by an organization, but it is only 53 days old and all recent repository work comes from one contributor. The absence of security policy and scanning further limits transparency.
68%
Total Score
67
100
78
83
The package is young at 53 days with three releases and a median interval of about 27 days, showing ongoing publication but limited history for judging long-term maintenance.
All six recent commits came from one contributor. Organizational ownership provides some handoff capacity, but no second active contributor is evidenced.
Six commits were made in the last three months, including a push very recently, but the activity is still modest for a new SDK.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, though the package's recent creation means the absence of an established user community is not independently severe.
Composer build tooling is present, but no security-scanning tools were detected, leaving a meaningful transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phaseo/sdk Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.