The package includes substantial documentation, repository tests, an Apache-2.0 license, and organization backing. Workflow references are unpinned and the repository lacks a security policy and automated security scanning.
58%
Total Score
50
100
78
75
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly two-year release gap and raising abandonment risk.
The package has had no releases in the last 12 months, and its latest release was about two years ago; this is a meaningful maintenance concern despite six releases overall.
There are no open issues or pull requests and no recent issue or pull-request activity; this is compatible with a small stable project but provides no evidence of active maintenance.
The repository has four stars and three forks, indicating limited adoption; this is supporting context rather than a decisive health problem for a small specialized library.
Composer build tooling is present, but no security scanning tools are reported, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
moneyphp/money Version ^4.0 | — | — |
aws/aws-sdk-php Version ^3.218 | — | — |
doctrine/annotations Version ^1.13 | — | — |
adbario/php-dot-notation Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.