Retrieves currency exchange rates from Yahoo! Finance.
42%
Total Score
unhealthy
Risky: no release or repository activity since 2015, with a single maintainer and no security policy.
The latest release was in December 2015, and there have been no releases in roughly 11 years. That long silence is a strong maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's prolonged release inactivity. No provided signal shows current maintenance capacity.
Only one registry account has publishing access, which increases bus-factor risk; the organization-backed repository provides some context but does not demonstrate active maintenance.
The repository has 0 stars, 0 forks, and 1 watcher, offering little evidence of external use or community support. Popularity is supporting evidence rather than decisive on its own.
The repository has no security policy, reducing transparency about vulnerability reporting and response. This adds a hygiene concern alongside the broader maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0 | — | — |
guzzlehttp/guzzle Version ~6.0 | — | — |
commercie/currency-exchange Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.