Unofficial, framework-agnostic PHP SDK for the Polish e-Doręczenia (e-Delivery) APIs: signed-JWT system authentication, Search Engine API v4 and User Agent API v3 (mailbox, sending and receiving).
62%
Total Score
caution
A brand-new 0.5 release has one active contributor and all 9 workflow actions are unpinned.
The registry namespace and repository are owned by the same individual account, so the single-maintainer concentration is not offset by organization-level backing.
The package is only 0 days old, with four releases published over roughly one day. This shows active initial work but provides too little history to demonstrate sustained maintenance.
One contributor made 100% of the 8 commits in the last 3 months. That concentration creates a meaningful continuity risk for a young project without organizational backing.
Version v0.5.0 is not a stable major release, so the API may still change. The release is not marked as a prerelease, which partly offsets that concern but does not establish maturity.
All 9 action references are unpinned, which weakens build reproducibility. The audit also reported low-confidence cache-poisoning patterns; those findings are hygiene concerns rather than strong evidence of a serious workflow risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2.0 || ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.