The package includes tests, a README, and an MIT declaration, but only one registry maintainer and a small dependency profile provide limited assurance. The repository could not be found, so ongoing maintenance and provenance cannot be verified.
42%
Total Score
50
50
80
100
The package has only one release, on August 16, 2017, with no releases in roughly nine years. This is strong evidence of abandonment for an SDK that may need compatibility and security maintenance.
The package declares two runtime dependencies, including PHPUnit as a runtime dependency, which is unusual for a production SDK and may unnecessarily increase consumer footprint.
Only one account has registry publish access. Administrative access is not proof of activity, but a single publisher leaves little visible redundancy if maintenance is needed.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version 5.* | — | — |
guzzlehttp/guzzle Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.