trexima/sri-client
Packaging and source documentation are solid, and the repository is correctly matched to its organization. The small footprint and absent security policy leave limited independent assurance, so pinning version 2.0.0 is preferable.
52%
Total Score
75
100
83
88
Health Score Breakdown
The package has 14 releases, but none in the last 12 months and its latest release was on October 25, 2022. That long period without a new release lowers confidence in ongoing maintenance.
There were zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. This is meaningful abandonment risk, although the repository is not archived.
The repository has zero stars, four forks, and one watcher. This is limited supporting evidence of adoption, but popularity alone does not determine package health.
Composer build tooling is present, but no security-scanning tools were detected. That leaves less automated evidence of ongoing project hygiene.
The repository has no security policy file, so there is no documented process for reporting or handling vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 klepoch |
| culka |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 cocur/slugify Version ^4.0 | — | — |
doctrine/dbal Version ^3.1 | — | — |
guzzlehttp/guzzle Version ^7.4 | — | — |
symfony/cache-contracts Version ^1.1||^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.