Usable with caveats: this is a well-documented, licensed first release with tests, a clear source repository, and no deprecation or install scripts. It has no maintenance track record yet, no repository security scanning, and its workflow does not declare token permissions, so depend on it only with normal early-release review.
68%
Total Score
50
100
83
90
Only one registry account, SS7API, has publish access. That is a narrow publishing base, though the repository and package naming provide some continuity with that publisher.
The registry namespace is associated with a personal GitHub user rather than an organization, so there is no demonstrated organizational backing to offset the single registry maintainer.
This is the package's first release, published 0 days ago, so there is no demonstrated release cadence or long-term maintenance record yet.
The repository has zero stars, forks, and watchers. This is not a decisive health problem for a package released today, but it provides no independent evidence of adoption or community review.
Composer build tooling is present, but no repository security scanning tools were detected, leaving a meaningful transparency and assurance gap for an SDK handling API credentials.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.