It has a usable README, repository tests, and an MIT license. Four workflow actions are unpinned, and the project has no security policy or scanning.
42%
Total Score
0
71
75
The latest release was published about two years and two months ago, with no releases in the last 12 months. Four releases show some history, but the prolonged release gap raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.
The repository has only 2 stars, 0 forks, and 1 watcher. Low popularity is supporting evidence rather than decisive, but it provides little indication of a broad user or contributor base.
Composer build tooling is present, but no security scanning tools were detected. This is a maintenance and transparency gap for a package handling API access and payment-related code.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/codec Version ^3.1 | — | — |
pimple/pimple Version ^3.5 | — | — |
hyperf/support Version ^3.1 | — | — |
psr/simple-cache Version ^3.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.