The package has tests, a README, an MIT license, and no install-time scripts. Its organization-backed repository is not archived, but maintenance has stopped for more than two years, so pinning this release carries abandonment risk.
57%
Total Score
75
86
75
There have been 28 releases overall, but none in the last 12 months and the latest release was more than two years ago. This indicates a prolonged maintenance gap despite a previously established release history.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release gap. The unarchived, organization-owned repository provides some context but does not show current maintenance.
The repository has 0 stars, 1 fork, and 0 watchers, providing little evidence of a broad user or contributor base. Popularity is supporting evidence rather than decisive, so this modestly reinforces the maintenance concern.
No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. This is a transparency and response-process gap, not evidence of malicious behavior.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.2 | — | — |
tronapi/data-types Version ^1.0.35 | — | — |
ffsoft-foss/web3.php Version ^2.1 | — | — |
kornrunner/secp256k1 Version ^0.2 | — | — |
simplito/elliptic-php Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.