It has an MIT license, a matching repository, and release notes for this version. The small, organization-backed codebase has no automated security scanning or published security policy; pin this version only if you can own ongoing maintenance.
43%
Total Score
50
75
83
The package has made no release in over eight years, with the latest release in March 2018. That long gap is strong evidence of abandonment risk despite eight historical releases.
The repository had zero commits and zero active maintainers in the past three months, reinforcing the release-history evidence of stalled maintenance.
There are no open issues or pull requests and no issue or pull request activity in the past month. This is consistent with an inactive project, though it is supporting evidence rather than proof of abandonment alone.
Composer build tooling is present, but the repository has no security scanning tools. That leaves a meaningful maintenance and transparency gap for a client handling identity-related integrations.
The repository is not archived, although its last push was in August 2019. The unarchived state is a modest positive but does not overcome the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.7 | — | — |
spomky-labs/jose Version ^6.1|^7.0 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.