ridebuilder/affiliate

The README, tests, MIT license, and minimal runtime dependencies provide a solid foundation. Organization backing and a second active contributor help offset the limited security and operational evidence.

Latest v0.1.1

Packagist

64%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is only 46 days old, with two releases published within about two hours and no later release activity observed. That leaves maintenance longevity unproven.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides little external adoption or review evidence for a new package.

Repo tooling

Composer is used for builds, but no security scanning tools were detected. For an SDK handling API credentials and postbacks, this is a modest transparency gap.

Security policy

The repository has no security policy. That makes vulnerability reporting and response expectations unclear for a package intended for server-side integrations.

Version stability

The latest release is v0.1.1 rather than a stable major version, so the public API may still change. It is not marked as a prerelease, which provides some compensation.