suifuda/suifuda-open-sdk

Dependency profilecaution

Seven runtime requirements, including PHP extensions and two cryptographic libraries, are a meaningful dependency surface for an SDK but are consistent with its signing and HTTP functionality.

Maintainerscaution

Only one registry publishing account is listed, and the project backing is a personal account rather than an organization, leaving limited visible publishing redundancy.

Release historycaution

The package is less than one day old and has only two releases, so there is not yet enough release history to demonstrate sustained maintenance or maturity.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Given that the project is less than one day old, this is weak supporting evidence rather than a standalone abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For an SDK handling signing and keys, the missing security automation is a real hygiene gap.