A solo maintainer and absent security policy leave little evidence of ongoing support. The matching repository, MIT license, and detailed README improve transparency but do not offset the long period without activity.
48%
Total Score
25
79
75
The latest release was in April 2023, with no releases in the preceding 12 months of collection; this indicates about three years of release inactivity despite 14 historical releases.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the extended release pause and raising abandonment risk.
One registry publishing account limits the visible maintainer base, although the linked repository is owned by the same individual and does provide clear ownership continuity.
The repository has one star and one fork, so there is little community evidence to supplement the inactive maintainer signal; popularity is supporting evidence rather than decisive on its own.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a package with cryptography and web-service functionality.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
qiniu/php-sdk Version * | — | — |
guzzlehttp/guzzle Version * | — | — |
lustre/php-dfa-sensitive Version * | — | — |
simplesoftwareio/simple-qrcode Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.