The small, focused PHP library has a clear MIT license, a stable version, and no install-time scripts. Documentation and security-process coverage are thin, so future fixes and safe integration are uncertain.
43%
Total Score
0
100
75
83
The package has only two releases, both in March 2022, and none in the last 12 months. This long period without a release is substantial abandonment evidence, although the package is not deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity since March 2022. This materially raises the risk that defects and compatibility issues will not be addressed.
The package has no README, tests, or changelog, which limits consumer guidance and verification for a PHP SDK. The exact-version GitHub release includes notes describing a demo, providing a small amount of release documentation.
Composer is used as the build tool, which is appropriate for this package, but no security scanning tools are configured. This is a secondary hygiene concern rather than evidence of immediate unfitness.
The linked repository has no security policy, leaving no documented route for reporting vulnerabilities. The package is small and has no other provided security-process evidence to compensate for this gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.