It has complete documentation, tests, release notes, and an MIT license. The project also shows no recent commits or security policy, leaving long-term maintenance unsupported.
12%
Total Score
33
42
83
Packagist marks the entire package as abandoned and provides bitpay/sdk as a replacement, making this release unsuitable for a new dependency.
The package has 24 releases but none in the last 12 months; its latest registry release was on March 28, 2018, leaving this release far behind current maintenance expectations.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment risk.
The linked repository is archived, and its last push was on January 22, 2021, indicating that active maintenance has ended.
The repository is owned by the BitPay organization, which provides some backing context, but it does not compensate for the package being abandoned and the repository being archived.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^2.3 || ^3.0 | — | — |
symfony/dependency-injection Version ^2.3 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.