timelogic-api/php-sdk
It includes tests, a README, release notes, a license, and a security policy. Recent work is active, but the project is new and concentrated in one contributor.
67%
Total Score
75
93
100
Health Score Breakdown
The package is linked to a repository owned by TimeLogic-API-LLC, but the owner is classified as a User rather than an organization, so this does not provide strong organizational handoff evidence.
This is a young package, released only once 38 days ago. That limits evidence of long-term maintenance and release stability, despite recent repository activity.
All 37 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.
All 39 analyzed action references are unpinned, and the release workflow installs a package outside a lockfile. The audit found no untrusted checkout or script-injection path, but this release automation still has meaningful reproducibility and supply-chain hygiene gaps.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 TimeLogic API LLC |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^1.7 || ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.