A PHP wrapper for CodesWholesale's API
58%
Total Score
67
100
81
88
Although the project has 34 releases and historically released about every 24 days, the latest registry release was October 30, 2020, with no releases in the last 12 months. That long publication gap materially raises abandonment and compatibility risk.
There were no commits and no active maintainers in the last three months. The recent repository push is reassuring, but the absence of sustained recent commit activity still lowers confidence in ongoing maintenance.
The repository has seven open issues and two pull requests, but none were opened, closed, or merged in the last month. This suggests limited current responsiveness.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk by itself.
The repository has no security policy. For an SDK handling API credentials and commerce integrations, the absence reduces transparency about vulnerability reporting and response.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3 | — | — |
sainsburys/guzzle-oauth2-plugin Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.