Clear licensing, a useful README, and release notes make the package understandable to consumers. The lack of tests and security scanning limits confidence in ongoing quality.
15%
Total Score
50
58
100
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk because future fixes and support are uncertain.
The repository recorded zero commits and zero active maintainers during the last 3 months. This supports the abandonment concern rather than showing active maintenance.
The linked Acquia repository is archived, despite a recorded push on August 21, 2025. Archiving indicates the project is no longer intended for active development.
The package has six releases since July 2021, but none in the last 12 months and its latest release was February 9, 2024. The long release gap materially increases maintenance risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0 || ^3.0 | — | — |
guzzlehttp/guzzle Version ~6.0 || ^7.0 | — | — |
acquia/http-hmac-php Version >=3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.