Package Health

tradzero/openai-php-client

The source includes tests and a changelog, and the package is MIT-licensed without install-time scripts. Its zero recent commits and lack of releases for over 12 months make future fixes uncertain, while all six workflow actions are unpinned.

Latest v0.4.1PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historydanger

The package is 636 days old, has 11 releases, and has had no releases in the last 12 months. That long publishing gap is a meaningful maintenance concern.

Repo commit activitydanger

There were no commits and no active maintainers in the last 3 months. Combined with the old last push, this is strong evidence that maintenance has stalled.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible adoption provides no additional maturity signal.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are detected. The build setup is present; the missing scanning is a modest transparency gap.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe to depend on.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nuno Maduro
Sandro Gehri

Direct Dependencies

DependencyLast ReleaseScore
psr/http-client
Version ^1.0.1
psr/http-message
Version ^1.0.1
php-http/discovery
Version ^1.15.2
psr/http-client-implementation
Version ^1.0.1
psr/http-factory-implementation
Version *

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform