The MIT license, clear README, tests, and matching source repository make adoption easier. Its single maintainer and lack of security policy or scanning leave little evidence of ongoing support.
58%
Total Score
50
100
83
83
Only one registry maintainer is listed. Because the project is user-owned rather than organization-backed, this indicates a thin publishing base and limited continuity evidence.
This is the package's only release, published about three years ago, with no releases in the last 12 months. The long gap weakens evidence of ongoing maintenance.
The repository has 6 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these low counts provide little external evidence of maturity or community support.
Composer is used for builds, but no security scanning tools are present. For an authentication and secrets SDK, that is a meaningful maintenance and transparency gap.
The repository has no security policy. For a package handling authentication and secrets, this leaves vulnerability reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
firebase/php-jwt Version ^6.8 | — | — |
guzzlehttp/guzzle Version ^7.0.1 | — | — |
phpfastcache/phpfastcache Version ^9.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.