Package Health/rams007/amazon-advertising-api-php-sdk

rams007/amazon-advertising-api-php-sdk

The package includes a substantial README, tests, and only two runtime dependencies. Its last release and repository activity were in 2020, while the license records conflict and no security tooling is present.

Latest 2.2

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about six years ago, with no releases in the last 12 months and only four releases overall. This is strong evidence of abandonment for an API client that may need to track a changing service.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but that does not compensate for the absence of recent work.

License

The manifest declares GPL-2.0-or-later, while the detected artifact license is Apache-2.0; license files are present, but the mismatch creates a material adoption and compliance uncertainty.

Repo tooling

Composer is used for the build, but no security scanning tools are present. This is a modest transparency and maintenance concern rather than evidence that the release is unsafe.

Security policy

The linked repository has no security policy. For a client handling advertising API credentials, the absence reduces the project's disclosure and maintenance transparency.