Usable with caveats: it has a stable release history, a matching maintained repository, and clear licensing, but the project has no recent commits, no tests, and only one registry maintainer. Depend on it only if you can accept limited maintenance and verification coverage.
68%
Total Score
50
50
93
75
The package declares 9 runtime requirements, including several PHP extensions plus PHPMailer and Monolog. The dependencies are explicit, but the broad extension and library footprint increases integration and upgrade surface somewhat.
Only one registry account has publish access. The matching user-owned repository and active release history provide some compensation, but the project still has a thin publishing and succession base.
The repository recorded zero commits and zero active maintainers in the last 3 months. Despite the recent registry release, this indicates limited recent development capacity and raises maintenance risk.
Composer build tooling is present, but no security scanning tools are configured. This reduces automated verification and security-maintenance transparency, though it is not by itself evidence that the package is unsafe.
The repository has no security policy. For a library handling integrations such as payments, mail, databases, and external services, this leaves vulnerability-reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version ^2.3 | — | — |
phpmailer/phpmailer Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.