One maintainer and no security policy leave limited visible support for a library that handles API integration. The included tests, matching source repository, and license make the package understandable, but do not offset its age.
39%
Total Score
50
92
75
Only one registry maintainer is listed, leaving limited publishing capacity and increasing reliance on a single person.
The latest release was in November 2018, with no releases in the last 12 months. This long publication gap is a substantial abandonment concern.
The repository has had zero commits and zero active maintainers in the last three months, consistent with the package having been inactive for years.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3 | — | — |
stephenhill/base58 Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.