Tests, licensing, and organization ownership provide useful support. The compact dependency set is reasonable, but the package offers limited evidence of ongoing maintenance and its workflow references are not pinned.
58%
Total Score
75
100
79
50
The repository contains tests, which supports maintainability, but the package has no README for consumers of this PHP library. The missing changelog is normal packaging practice and is not a concern by itself.
This is the only release, published about 2 years and 7 months ago, with no releases in the last 12 months. That leaves limited evidence of continued maintenance.
There were 0 commits and 0 active maintainers in the last 3 months, while the repository was last pushed about 1 year and 10 months ago. This is meaningful evidence of stalled maintenance.
The repository uses Make and Composer build tooling, but no security scanning tools were detected. The build support is positive, while the missing security tooling is a modest transparency gap.
No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fond-of-impala/navision-company Version ^1.0.0 | — | — |
fond-of-impala/company-product-lists-bulk-rest-api Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.