Package Health

spo/sdk-php

This is a transparent, minimal PHP SDK with an MIT license, an identifiable source repository, matching package contents, tests, documentation, no install-time scripts, and no registry deprecation. However, version v0.1.0 was released only recently and is the sole release, so there is no demonstrated maintenance history or version stability yet; repository commit and issue activity are also currently absent, although that is consistent with a newly created project. The lack of security scanning and a security policy adds a smaller hygiene concern. It may be reasonable for evaluation or controlled adoption, but production users should validate API stability and watch for sustained maintenance before relying on it heavily.

Latest v0.1.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

One registry maintainer is consistent with the repository being owned by an individual, but it creates a limited publishing capacity and bus-factor concern.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-maintainer structure offers limited demonstrated backing for long-term support.

Release historycaution

There has been only one release, published within the current day, so the package has no demonstrated release cadence or long-term maintenance record.

Repo commit activitycaution

The repository has zero commits in the last three months and zero active maintainers in that period. Because the release is less than a day old, this primarily reflects insufficient history rather than proven abandonment, but ongoing maintenance remains unestablished.

Repo issue activitycaution

There are no issues or pull requests and no recent issue or pull-request activity; for a newly created repository this is inconclusive, but it provides no evidence of community support yet.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Balachander Mohanraj

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/guzzle
Version ^7.0
—
—

Weekly Downloads

Info

Last Published
23 days ago
Created
23 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform