The MIT license, repository tests, release notes, and dependency scanning provide useful foundations. A single individual appears to carry the project, limiting confidence in its long-term maintenance capacity.
55%
Total Score
50
100
94
75
Only one registry maintainer is listed, and the repository owner is an individual rather than an organization. That creates limited observable redundancy if the maintainer becomes unavailable.
The repository is owned by an individual account rather than an organization, so there is no demonstrated institutional backing to compensate for the single-maintainer structure.
The package has only 3 releases since January 2023, with no releases in the last 12 months and the latest release in September 2024. This indicates a meaningful maintenance gap for an SDK, despite the project not being very old.
There were no commits and no active maintainers during the last 3 months. This is direct evidence of stalled recent development and raises abandonment risk, even though the repository was pushed earlier in 2026.
There were no new or closed issues in the last month, and 3 pull requests remain open with none merged. This suggests limited recent project responsiveness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^5.4|^6.0|^7.0 | — | — |
illuminate/log Version ^8.83 | — | — |
jms/serializer Version ^3.5.0 | — | — |
guzzlehttp/guzzle Version ^7.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.