The README is detailed, and the package has a stable MIT license, no install scripts, and a matching source repository. It has little adoption and no security policy, so pin 1.0.1 rather than expecting active support.
58%
Total Score
50
100
75
75
Only two releases were published, with the latest on November 27, 2023 and none in roughly two years and ten months; this is the main abandonment concern.
The repository is owned by an individual rather than an organization, so the single-person project context offers limited visible continuity if the maintainer stops work.
The repository has only 2 stars, 0 forks, and 1 watcher, providing little evidence of community adoption or external review.
The linked repository is not archived, although its last push was on November 27, 2023 and does not offset the long inactivity shown by the release history.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; this is a hygiene concern for an SDK handling delivery APIs.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version 1.* | — | — |
jms/serializer Version 3.* | — | — |
psr/http-client Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.