Package Health

sanjarani/openai

There are no repository tests or security scanning, and one person publishes the package. The MIT declaration, clear README, matching repository, and non-deprecated status are reassuring.

Latest v1.0.4PackagistPackagist

54%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

72

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has four releases clustered over about four days, then no releases in the following 12 months. That weakens confidence in ongoing maintenance for a broad API integration package.

Maintainerscaution

One registry publishing maintainer creates a thin operational base, with no organization backing shown to compensate for the concentration.

Package scaffoldingcaution

The release includes a substantial README, while the absence of tests and a changelog in the published artifact is normal packaging practice. The repository also reports no tests or changelog, which provides limited project documentation beyond the README.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but these numbers provide little external evidence of maturity or review.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a meaningful transparency and maintenance gap for a package handling API credentials.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kiyarash Sanjarani Vahed

Direct Dependencies

DependencyLast ReleaseScore
illuminate/http
Version ^11.0|^12.0
—
—
guzzlehttp/guzzle
Version ^7.0
—
—
illuminate/support
Version ^11.0|^12.0
—
—
illuminate/contracts
Version ^11.0|^12.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform