The package includes a readable README, a small dependency set, and no install-time scripts. It has no declared or detected license, leaving its legal terms unclear.
12%
Total Score
25
58
75
Packagist marks the entire package as abandoned and lists micro-service-client as its replacement, making this release unsuitable for a new dependency.
The latest release was in September 2018, and there have been no releases in roughly eight years. That strongly indicates the package is abandoned.
The repository has recorded zero commits and zero active maintainers in the last three months, with its last push in October 2018. This confirms the long-standing lack of maintenance.
Neither the package metadata, artifact, nor repository contains a recognized license declaration or license file, leaving the terms for using the code unclear.
Only one registry publishing account is listed, and the project is user-owned rather than organization-backed. This provides little visible maintenance capacity alongside the inactive repository.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
96qbhy/simple-jwt Version ^0.0.3 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.