Risky to adopt because the package has had no release in over four years and no repository commits in the last three months. It is licensed, stable, non-deprecated, and backed by a matching repository, but maintenance appears effectively stopped.
45%
Total Score
0
78
75
The package has 17 releases since 2015, but none in the last 12 months; its latest release was over four years ago. This strongly raises abandonment and compatibility concerns for a dependency.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the absence of recent releases. This is a substantial maintenance concern.
The repository has 1 star, 0 forks, and 0 watchers, providing little evidence of a broad user or contributor base to help sustain the package.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest hygiene concern rather than evidence that the package is unsafe.
The repository has no security policy. This is a transparency gap, although it is less significant than the clear evidence of stalled maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aws/aws-sdk-php Version ^3.0.0 | — | — |
league/flysystem Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.