Unfit to use: this package is explicitly abandoned in favor of tagmydoc/onespansign-sdk-php-laravel. Its repository is not archived and the release is stable, but there has been no commit activity in three months and the project has minimal adoption and documentation.
20%
Total Score
50
63
50
The package is marked abandoned at package scope and names tagmydoc/onespansign-sdk-php-laravel as its replacement. This is a severe dependency risk even though the specific release is stable.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the abandoned registry status, this is strong evidence that ongoing maintenance cannot be relied upon.
The artifact and repository contain no README, tests, or changelog. GitHub Releases are present, which provides some release transparency, but the lack of usage and verification material remains a meaningful gap.
The package has existed for about 6 years with 12 releases, but only one release appeared in the last 12 months and the median interval is about 199 days. That indicates slow maintenance rather than active development.
The repository has zero stars and forks and only one watcher, providing little evidence of community adoption or independent oversight. Popularity is supporting evidence, but this reinforces the other concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
tagmydoc/onespansign-sdk-php Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.