It includes tests, release notes, and a clear MIT license. The small project has no security scanning, and its workflows use broad or unpinned automation.
67%
Total Score
67
100
83
75
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is limited visible organizational backing.
The package is about 1 year and 8 months old with four releases, but only one release in the last 12 months indicates a recently slow cadence.
The repository had zero commits and zero active maintainers in the last 3 months, a concrete sign that maintenance has currently gone quiet.
The repository has no stars or forks and one watcher, providing little external evidence of adoption or community support, though popularity is only supporting evidence.
Composer build tooling is present, but no security scanning tools were detected, leaving a maintenance and transparency gap for a library handling payment API integration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
camoo/curl-http-client Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.