shadow-software/dabdash-php-sdk
Healthy and reasonable to adopt. It has recent releases, active work from three contributors, a matching organization-backed repository, tests, and no deprecation or install scripts. Review its broad write permissions and pull-request workflow before relying on it in a sensitive build pipeline.
82%
Total Score
100
100
94
70
Health Score Breakdown
One of two workflows uses pull_request_target, which can require careful handling of untrusted pull requests even though no untrusted checkout or script injection was detected.
Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest security-process gap rather than evidence of abandonment.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Both workflows declare top-level write permissions. Broad write access increases the impact of a compromised workflow, although no missing permission declarations were found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^1.7 || ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 20 days ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.