The project is clearly packaged and documented, with tests, release notes, and a matching repository. Its short history, single active contributor, absent security policy, and unpinned workflow actions leave meaningful maintenance and build-hygiene concerns.
68%
Total Score
50
100
83
83
One registry maintainer is consistent with the matching user-owned repository, but it provides little redundancy if that maintainer becomes unavailable.
The package and repository are owned by the same individual account, confirming ownership alignment but not providing organizational backing or handoff capacity.
The package is only 69 days old with two releases, so there is not yet enough history to establish long-term maintenance reliability.
All six recent commits come from one contributor, leaving a high single-person dependency for ongoing maintenance.
Six commits from one active maintainer in the last three months show current development, but the activity is still limited and concentrated.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fsans/fms-odata-spec-php Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.