Usable with caveats, but verify that the proprietary license permits your use. The package has a recent release and a matching repository, while maintenance activity has been quiet, dependencies are unusually broad, and security practices are limited.
55%
Total Score
50
50
69
75
The manifest declares a proprietary license and no license file was found, creating a meaningful legal and adoption concern for a package presented as open source.
Twenty runtime dependencies, including many PHP extensions and unrelated-looking libraries, increase integration and maintenance burden for consumers.
There have been 11 releases over about 2 years and 7 months, but only one release in the last 12 months, indicating a slow maintenance cadence despite a recent release.
The repository had no commits and no active maintainers during the last 3 months, a maintenance concern partly offset by the recent release and push recorded elsewhere.
The repository has zero stars and forks and only one watcher. This is weak supporting evidence rather than proof of poor quality, but it provides little external validation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version ^2.6 | — | — |
phpmailer/phpmailer Version ^v6.6.0 | — | — |
paypal/paypal-checkout-sdk Version * | — | — |
drechsler-development/class-library Version ~1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.