dpodium/sms-api
Usable with caveats: the package is clearly backed by its matching organization repository and is not deprecated or archived, but it has had no release or commit activity for nearly five years. Its limited security and testing evidence increases maintenance risk for a library handling SMS integrations.
58%
Total Score
50
75
75
Health Score Breakdown
The package has 20 releases overall, but none in the last 12 months and its latest release was in December 2021, nearly five years ago. This is strong evidence that maintenance has stalled despite its earlier release history.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long period without a new package release. No provided signal shows current development activity to offset this.
Composer is used for the build and dependency workflow, but no security scanning tools are configured. The established build tooling is positive, while the lack of scanning leaves a maintenance and transparency gap.
The linked repository has no security policy. For a library that integrates with SMS providers and may handle credentials, this is a transparency gap, although it does not by itself show that the package is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Darren Ng |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twilio/sdk Version * | — | — |
guzzlehttp/guzzle Version ~6.0|~5.0|~4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.