shanginn/mistral-sdk

The package is a small, early-stage library with limited evidence of ongoing maintenance and weak consumer documentation. Its release workflow also uses unpinned actions, including an archived action, which adds avoidable supply-chain hygiene risk.

Latest 0.1.2

Packagist

42%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the initial release burst and raising abandonment risk.

Dependency profile

Eight runtime dependencies create a meaningful dependency surface for a small SDK, although the signal does not show unusual or clearly excessive dependencies.

Maintainers

Only one registry account can publish releases. The repository is user-owned rather than organization-backed, so there is little evidence of redundant publishing capacity.

Package scaffolding

The package has no README, tests, or changelog, which weakens consumer guidance and project transparency. The exact version does have a GitHub release, partly compensating for the missing changelog, while absent tests are normal for published artifacts but the missing README matters for a library.

Project backing

The package and repository are owned by the same individual account, not an organization, so there is no observed organizational backing to offset the thin maintenance evidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nikolai Shangin

Direct Dependencies

Dependency	Last Release	Score
amphp/file Version ^3	—	—
amphp/http Version ^2.1	—	—
crell/serde Version ^1.3	—	—
amphp/http-client Version ^5.3	—	—
symfony/serializer Version ^7	—	—