stewart-php/client
The repository includes tests, a clear README, matching package source, and MIT licensing. It is brand new, pre-1.0, and its only workflow grants broad write access, so long-term maintenance and workflow hygiene remain unproven.
68%
Total Score
100
83
50
Health Score Breakdown
This is the first release, published today, so there is no release track record or cadence to demonstrate sustained maintenance.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a network client, although this is a transparency gap rather than evidence of unsafe code.
Version v0.1.0 is not a stable major release, which signals an early API and a higher likelihood of breaking changes.
The single workflow uses a pull_request_target trigger and top-level write permissions, but the audit found no untrusted checkout, script injection, or other findings; this is a mild hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
amphp/amp Version ^3.1 | — | — |
amphp/pipeline Version ^1.2 | — | — |
amphp/websocket Version ^2.0.4 | — | — |
revolt/event-loop Version ^1.0.9 | — | — |
Weekly Downloads
Info
- Last Published
- 4 hours ago
- Created
- 4 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.