yasukei/dmm-api-client-php
The MIT license, tests, changelog, and release notes make integration and maintenance easier. GitHub Actions use all six actions without pinned versions, and the repository has no security policy.
68%
Total Score
100
80
75
Health Score Breakdown
The package is effectively brand new: it is 0 days old with only 2 releases, so long-term maintenance and compatibility are not yet established.
The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
v0.2.0 is not a stable major release, and the README warns that the API may change without notice before v1.0.0.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 6 action references are unpinned, weakening build reproducibility and supply-chain controls.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 yasukei |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 cuyz/valinor Version ^2.6 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
php-http/discovery Version ^1.19 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 3 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.