Package Health

yunzhanghuopen/sdk-php

The organization backing provides some handoff capacity, and the package has a clear README, MIT licensing, and documented release notes. Recent work is concentrated in one contributor, with no security policy or scanning tools, so maintenance oversight is thinner than ideal.

Latest 2.0.32PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

93

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Repo bus factorcaution

All 3-month commit activity came from one contributor. Organizational backing partly offsets this concentration, but no second recently active contributor is shown.

Repo commit activitycaution

There were 2 commits in the last 3 months, showing recent activity but a relatively light maintenance pace compared with the regular release history.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are reported. This is a modest oversight gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

yunzhanghu

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
14 days ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform