The source repository is licensed, has tests, matches the package, and documents this release with notes. Limited security-process evidence and a thin release history reduce confidence in long-term maintenance.
63%
Total Score
75
83
50
Only three releases exist, with no registry release in the last 12 months and the latest published in June 2023; this indicates a slow release cadence.
The repository shows no commits or active maintainers in the last three months, although its last push was in June 2025, so current maintenance is uncertain rather than clearly abandoned.
The repository uses Composer, but no security-scanning tools were detected, leaving a modest tooling gap for dependency and release hygiene.
The repository has no published security policy, leaving no clear documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/di Version ^2.4 || ~3.0.0 | — | — |
moneyphp/money Version ^4.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.