web3-is-going-just-great/credentials-dot-dev-php-sdk
The package is clearly licensed and documented, and its small dependency set is straightforward. However, it remains an unreleased-quality beta with no new release or repository activity for more than three years, so maintenance risk is substantial.
42%
Total Score
0
70
50
Health Score Breakdown
This is the package's only release, published in December 2022, with no releases in the following three years. That strongly suggests abandonment risk despite the repository remaining available.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided maintenance signal compensates for this inactivity.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is less serious than the package's prolonged inactivity.
The assessed version is still v0.0.1-beta, and all recent releases are prereleases. That limits maturity and signals that the API may not be stable for a long-lived dependency.
The single workflow was fully analyzed with no audit findings or untrusted triggers, but all three action references are unpinned. That leaves avoidable build-integrity exposure without making the package unfit on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 André Schwarzer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^2.57 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.