Package Health

sensiolabs/consul-php-sdk

Clear documentation, tests, and release notes make integration easier. The source is active, but this registry package is marked abandoned and recent work comes from one contributor; use the listed replacement package instead.

Latest v5.4.0PackagistPackagist

35%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

86

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Registry deprecationdanger

Packagist marks the package abandoned at package scope and points to friendsofphp/consul-php-sdk as the replacement. This is a substantial adoption risk even though the assessed release is current.

Repo bus factorcaution

All four recent commits came from one contributor, giving the project a thin recent contributor base and increasing continuity risk despite organization backing.

Security policycaution

The repository has no security policy. For an SDK handling Consul access and ACL tokens, this is a transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted triggers or injection sinks, but both high-confidence findings concern unpinned container images and all four action references are unpinned. These are meaningful build-reproducibility weaknesses.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Grégoire Pineau

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^2|^3
—
—
symfony/http-client
Version ^6.4|^7.4|^8.1
—
—

Weekly Downloads

Info

Last Published
2 days ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform