The package includes tests, a README, an MIT license, and a stable release line. Its broad runtime dependency set and lack of security scanning add ongoing maintenance burden.
62%
Total Score
38
50
83
67
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have slowed despite the recent release.
Fifteen runtime dependencies, including several related project packages, increase upgrade and compatibility surface compared with a small standalone library.
A post-update command runs during dependency updates, adding some install-time behavior that deserves attention, though this is not severe by itself.
One registry publishing account creates a thin release-publishing base and increases continuity risk if that account becomes inactive.
The package and repository are owned by the same individual account, so the single-account publishing base reflects the project's actual ownership rather than an organization-backed team.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
julio101290/auth Version ^1.0 | — | — |
phpcfdi/cfditopdf Version ^0.4.0 | — | — |
phpcfdi/cfdi-to-json Version ^0.3.2 | — | — |
phpcfdi/sat-catalogos Version ^0.3.1 | — | — |
codeigniter4/framework Version ^4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.