Package Health

tims/amazon-creatorsapi-php-sdk

The package is documented, tested, licensed, and has no install-time scripts. Read-only workflow permissions help, but missing security tooling and unpinned actions reduce transparency.

Latest v1.3.0PackagistPackagist

64%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package is only 55 days old and has two releases, both published within minutes on the same day, so long-term maintenance is not yet demonstrated.

Repo bus factorcaution

One contributor made all two commits in the last three months, leaving maintenance dependent on a single active person.

Repo commit activitycaution

Only two commits were recorded in the last three months, so observed maintenance activity is limited even though it is recent.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected, leaving an avoidable verification gap.

Security policycaution

The repository has no security policy, so its process for receiving and handling vulnerability reports is not documented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Hitesh Varyani

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/psr7
Version ^1.7 || ^2.0
—
—
guzzlehttp/guzzle
Version ^7.3
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
2 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform