Tests, release notes, and a license support adoption. Workflow hygiene is limited, and the project offers little recent evidence of active ownership.
58%
Total Score
75
88
50
The package has 19 releases over roughly 13.5 years, but none in the last 12 months; its latest release was about 18 months ago. This indicates slowing maintenance despite a long release history.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, providing no recent evidence of ongoing maintenance.
No security policy is published. This is a transparency gap, though the complete workflow audit found no dangerous workflow findings to compound it.
The workflow audit is complete, shows read-only permissions, and found no dangerous patterns, but both of the two action references are unpinned. That is a limited reproducibility and supply-chain hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twilio/sdk Version ^7.3.0 | — | — |
kriswallsmith/buzz Version ^1 | — | — |
messagebird/php-rest-api Version ~1.1 | — | — |
symfony/event-dispatcher Version ^6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.