Package Health

signifyd/signifyd-php

Signifyd client API plugin for PHP

Latest 4.1.6PackagistPackagist

52%

Total Score

caution

Usable with caveats: the SDK targets a deprecated V2 API and recent repository activity has stopped.

Are you affected? Scan for Free

Health Score Breakdown

Package scaffoldingcaution

The artifact includes a substantial README and tests, and this exact version has GitHub release notes. However, the README explicitly says the V2 SDK and API are deprecated, which materially increases future adoption risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. That is a meaningful maintenance concern for a package developers may need to keep compatible with its service.

Repo issue activitycaution

There is only one open issue and one open pull request, with no new or closed issues or pull requests in the last month. This indicates limited current project interaction, though the small backlog is not severe on its own.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected. The missing automated security coverage is a modest transparency and maintenance gap.

Security policycaution

No security policy was found in the repository. For an SDK handling payment and fraud-related API data, this leaves vulnerability reporting and response expectations unclear.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10535 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
signifyd/signifyd-php is vulnerable to Insertion of Sensitive Information into Log File in versions 2.0.0 - 4.1.4.
2.0.0 - 4.1.4
Low

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
monolog/monolog
Version >=1.16.0
—
—

Weekly Downloads

Info

Last Published
10 months ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform