smartlyq/sdk

The package includes clear documentation, tests, and release notes for this version. Maintenance is concentrated in one contributor, and every workflow action is unpinned; the organization backing helps, but does not remove those concerns.

Latest v0.1.37

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all two recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown to reduce concentration risk.

Repo commit activity

Only two commits were recorded in the last three months, so actual source activity is modest despite the frequent registry releases.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stability

The release is a non-prerelease 0.1.x version, but the pre-1.0 major version signals that the public API may still change materially.

Workflow audit

All six referenced actions are unpinned, so workflow dependencies can change without a repository update. The audit found no untrusted checkouts, script injection, broad top-level write permissions, or other reported workflow findings.