kdaviesnz/escrow
Tests, a README, and an MIT license make the package easier to inspect, but its limited security tooling adds uncertainty. The small project footprint leaves little evidence of ongoing support.
38%
Total Score
0
71
75
Health Score Breakdown
The package has had only one release, published nearly nine years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a package intended as a maintained API client.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been inactive since 2017.
Composer build tooling is present, but no security scanning tools were detected. That reduces evidence of ongoing dependency and code-risk monitoring.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a hygiene and transparency gap, though it is not evidence of malicious behavior.
The only published version is a prerelease, so consumers have no stable release to rely on. Its age and lack of subsequent releases reinforce the maintenance concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 :kdavies |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version 6.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.