ung/sign-client

The repository is clearly connected to the package, has a usable README, and is backed by an organization. Its small footprint and absent security policy leave limited evidence for ongoing care; pin version 1.0 only if its API meets your needs.

Latest 1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has made only one release, with the latest published about 2 years and 8 months ago. That is meaningful evidence of limited ongoing maintenance, although the stable 1.0 version reduces prerelease uncertainty.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, consistent with a package that has seen no release for about 2 years and 8 months. This is the strongest maintenance concern.

Repo popularity

The repository has zero stars and forks and one watcher, providing little community validation. Popularity is supporting evidence only, so this modestly lowers confidence rather than determining the verdict.

Repo tooling

The repository uses Composer, but no security scanning tools were detected. The missing scanning is a hygiene gap, though the simple seven-file project limits its weight.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This reduces transparency for a package that handles document-signing integration.