shadow-software/agt-php-sdk
Clear usage documentation and generated tests support integration. Organization backing and recent work reduce abandonment risk; workflow permissions and action pinning still need tightening.
78%
Total Score
100
100
88
50
Health Score Breakdown
The package is young at 50 days with four releases, including four in the last 12 months; this is limited history, but the frequent initial releases provide some evidence of active development.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest supply-chain hygiene gap.
No repository security policy was detected, reducing transparency about vulnerability reporting and response practices.
The only workflow grants top-level write permissions and both action references are unpinned. The audit found no untrusted checkout, script injection, or other high-confidence dangerous finding, so this is a hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^1.7 || ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.