A client implementation of the Xero API, supplying raw data.
40%
Total Score
50
75
75
The package has had only one release, published about 8 years and 9 months ago, with no releases in the last 12 months. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and indicating no observed maintenance capacity.
Four issues remain open, while there were no new or closed issues and no merged pull requests in the last month. This adds to the maintenance concern, though issue counts alone are not decisive.
Composer is used as the build tool, but no security-scanning tooling was observed. This is a modest hygiene gap and does not outweigh the maintenance evidence.
The repository has no security policy. For a library handling OAuth access, this reduces transparency for reporting and handling security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^1.20 | — | — |
guzzlehttp/oauth-subscriber Version 0.3.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.