Testing is present, the source repository is not archived, and the package uses a stable major version. Maintenance has slowed to one release in the past 10 months with no commits in the past 3 months, while 45 runtime dependencies and no README increase adoption and upkeep costs.
58%
Total Score
50
50
75
50
The package declares 45 runtime dependencies, including many extensions and related packages, creating a comparatively large compatibility and maintenance surface.
Tests are present in both the published package and repository, which is positive, but the package has no README for consumers integrating this PHP library.
The package has 104 releases overall, but only one release in the past 10 months, indicating substantially slower recent maintenance than its historical release count suggests.
There were no commits and no active maintainers in the past 3 months, which is a meaningful recent-maintenance concern despite the package's longer release history.
Composer build tooling is present, but no security scanning tooling was detected, leaving a modest repository-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpunit/phpunit Version ^10.0.0 | — | — |
tomsgu/pdf-merger Version ^0.5.0 | — | — |
gamboa.martin/test Version ^5.0.0 | — | — |
spatie/dropbox-api Version ^1.19 | — | — |
gamboa.martin/banco Version ^17.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.