The package includes a license, substantial documentation, tests, and a matching source repository. Its maintenance has effectively stopped, leaving a financial API library with no recent updates or active contributors.
40%
Total Score
38
50
67
88
The package has had no release in over eight years, with 0 releases in the last 12 months. Fourteen historical releases show it was once published, but do not offset the prolonged inactivity.
There were 0 commits and 0 active maintainers in the last three months. Combined with the last push being over eight years ago, this is strong evidence of abandonment risk.
Five runtime dependencies, including Guzzle and dotenv, are a moderate integration surface for this API client. The dependency count is not excessive, but stale dependencies may be harder to support after years without releases.
Two registry maintainers are listed, which is reasonable for a user-owned project. However, registry access does not demonstrate current activity, and the repository shows none recently.
The repository and registry are owned by the same individual account, so the package identity is consistent. There is no organization backing shown to provide additional maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version ^1.22 | — | — |
vlucas/phpdotenv Version ^2.4 | — | — |
guzzlehttp/guzzle Version ~6.2 | — | — |
symfony/var-dumper Version ^3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.