tribepeer/sdk

This is a coherent, licensed PHP SDK with a small and understandable artifact, no install-time lifecycle scripts, a non-archived repository, and no registry deprecation. However, v0.1.0 was released only minutes before assessment and is the sole release, so maintenance and stability are unproven; the repository has no observed commit activity beyond initial publication, no tests or changelog, no security scanning, and no security policy. The README does identify the package and its repository, which supports provenance, but the single-user ownership and absence of broader adoption make this better treated as an early-stage dependency requiring validation and monitoring rather than a mature, low-risk foundation.

Latest v0.1.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing account is listed, limiting visible publishing redundancy. The repository is user-owned, so there is no organization backing shown to compensate for the thin maintainer base.

Package scaffolding

A README and GitHub Releases support basic usability and release communication, but neither the artifact nor repository contains tests or a changelog. For a new SDK, the lack of tests is a meaningful maintenance and reliability gap.

Project backing

The repository owner is a single user account rather than an organization, providing limited visible institutional backing. This matters more because the release has no established maintenance history.

Release history

There is only one release and the package age is 0 days, so there is no historical evidence of sustained maintenance or release reliability. This is a substantial maturity concern, although it does not establish abandonment for a newly published package.

Repo commit activity

The repository records zero commits and zero active maintainers in the preceding three months, consistent with a repository created very recently. This leaves ongoing maintenance capacity unverified rather than proving that development has ceased.