The repository includes tests, release notes, a README, and matching package content, while MIT licensing and no install scripts reduce adoption friction. Its single-day history provides little evidence of sustained maintenance, and the workflow uses broad write permissions with all four actions unpinned.
68%
Total Score
50
100
88
75
The repository is owned by an individual rather than an organization, so the single-person project backing offers limited demonstrated maintenance capacity.
This is the first release, published 0 days ago, so there is no release track record or demonstrated long-term maintenance yet.
There were no commits or active maintainers in the prior three months, but the repository and release are only 0 days old, making this primarily a lack of history rather than evidence of a collapsed project.
Composer build tooling is present, but no security scanning tooling was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, which makes vulnerability reporting less transparent for a library intended for integration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phox/typesafe-sdk-php Version ^0.4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.