sound-sdk-php
46%
Total Score
unhealthy
Risky: nearly four years without a release or repository commit signals likely abandonment.
The package has only three releases and none in the last 12 months; its latest release was nearly four years ago. This is strong evidence of stalled maintenance for a dependency.
There were zero commits and zero active maintainers in the last three months, with the repository last pushed in November 2022. This reinforces the abandonment concern shown by the release history.
The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these low numbers provide little evidence of broad community validation.
The project uses Composer, but no security scanning tools were detected. For a package handling cryptographic and blockchain operations, that is a meaningful hygiene gap.
The repository has no security policy. This weakens the project's disclosure and maintenance transparency, especially for a package exposing signing and transfer functionality.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sc0vu/web3.php Version ^0.1.4 | — | — |
google/protobuf Version ^3.21 | — | — |
monolog/monolog Version ^2.8 | — | — |
kornrunner/keccak Version ^1.1 | — | — |
phpseclib/phpseclib Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.