The small artifact has no README, and its declared proprietary license conflicts with the MIT license file. The repository could not be found, so maintenance and publication provenance cannot be checked.
40%
Total Score
60
75
The package has had no release in over eight years, with zero releases in the last 12 months. That strongly increases abandonment and compatibility risk despite its earlier release activity.
The artifact includes an MIT license file, but the manifest declares the package proprietary. This mismatch creates legal uncertainty for adopters even though a recognized license is present.
The artifact contains only LICENSE, S3.hh, and composer.json. This is consistent with a very small header-only package, but provides little supporting documentation or release context.
The published artifact has no README. For a small library integration package, the missing consumer documentation is a real usability and transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aws/aws-sdk-php Version 2.* | — | — |
intaglio/nuclio-core Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.