rocketc31/voltn-sdk

The repository includes tests, a changelog, MIT licensing, and Dependabot, which provide useful project basics. The package is newly published, and its workflow uses nine unpinned actions; maintenance history is too short to establish long-term reliability.

Latest 0.3.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 0 days old with three releases, all published within the assessment window, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activity

The repository records zero commits and zero active maintainers in the last three months. Because the package is newly published, this may reflect limited history rather than abandonment, but it leaves maintenance capacity unproven.

Security policy

No repository security policy was found, leaving vulnerability-reporting expectations undocumented. This is a minor transparency gap rather than a standalone adoption blocker.

Version stability

Version 0.3.0 is a non-stable-major release, indicating an early API with a higher likelihood of breaking changes than a mature stable-major package.

Workflow audit

The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, script injection, or reported findings. However, all 9 of 9 action references are unpinned, which weakens build reproducibility and supply-chain control.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

RocketC31

Direct Dependencies

Dependency	Last Release	Score
psr/http-client Version ^1.0	—	—
psr/http-factory Version ^1.0	—	—
psr/http-message Version ^1.1 \|\| ^2.0	—	—
php-http/discovery Version ^1.19	—	—
psr/http-client-implementation Version ^1.0	—	—