Antavo Loyalty SDK for PHP
42%
Total Score
unhealthy
Risky: no maintenance activity since June 2019 and no detected license leave this SDK a liability.
No declared license, license file, or detected repository license was found, so the release has no clear terms for legal reuse.
The package has had no releases in over seven years; its four-release history stopped on June 13, 2019, indicating prolonged abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and a serious maintenance concern.
Composer and Box provide build tooling, but no security-scanning tool was detected; this is a hygiene gap that adds little weight compared with the abandonment and licensing concerns.
The repository is not archived, which is a modest positive, but its last push was still on June 13, 2019 and does not offset the inactivity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
antavo/escher-php Version ^0.2.13 | — | — |
antavo/signed-token Version ^1.0 | — | — |
pakard/rest-client-php Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.