upviral/php-sdk

Release historycaution

The package has only two releases, with the latest published in April 2022 and none in the last 12 months. This is a substantial maintenance concern for a dependency assessed several years after its last release.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. This lowers confidence that defects or compatibility issues will be addressed promptly.

Repo popularitycaution

The repository has 1 star and 1 fork, indicating a very small user and contributor base. Popularity is supporting evidence rather than decisive, but it offers little compensating maintenance capacity.

Repo toolingcaution

Composer is used for builds, which fits the package, but no security scanning tooling is present. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a minor transparency gap for a package that handles API credentials.