The package is small and coherent, with an MIT declaration, a usable README, and no install-time scripts. Its single-maintainer project has little supporting evidence for ongoing care, so pinning this release carries meaningful abandonment risk.
38%
Total Score
50
100
67
88
The latest release was published nearly six years ago, with no releases in the past 12 months. This is strong evidence that maintenance has stopped.
Only one registry maintainer is listed, leaving little visible publishing redundancy. The linked repository is user-owned, so this is a modest concern rather than evidence of organizational backing or failure.
There are no open issues or pull requests and no issue or pull-request activity in the past month. While a small stable package may need little support, this does not offset the long inactivity shown elsewhere.
The repository name matches the package, but its README does not mention the package. That weakens transparency about the repository-to-package relationship.
The repository has zero stars and forks, with two watchers. Low popularity is only supporting evidence, but it provides no external adoption signal to offset the long inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ekvio-dev/integration-php-sdk Version ^2 | — | — |
ekvio-dev/integration-app-contracts Version ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.