Package Health

quantcdn/quant-php-client

Regular releases, a large README, tests, and release notes provide useful maintenance evidence. The organization-backed repository is correctly linked, but all three workflow actions are unpinned and no security policy is published.

Latest 4.9.0PackagistPackagist

69%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo commit activitycaution

There were no commits and no active maintainers during the last three months, a meaningful maintenance concern despite the recent release and push activity.

Repo issue activitycaution

Three pull requests were opened in the last month, showing some activity, but none were merged and no issues were closed, so this only partly offsets the absent recent commits.

Repo popularitycaution

The repository has no stars, forks, or watchers, which provides little external validation; however, the package is only about 10 months old and popularity is supporting evidence rather than a verdict.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a client library that handles API access.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-confidence audit findings, but all three action references are unpinned, weakening build reproducibility and update safety.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

OpenAPI

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/psr7
Version ^1.7 || ^2.0
—
—
guzzlehttp/guzzle
Version ^7.3
—
—

Weekly Downloads

Info

Last Published
7 months ago
Created
10 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform