Agentic Commerce Protocol specification for PHP
78%
Total Score
80
100
88
80
The package is only 28 days old with two releases and a median interval of about 28 days, so long-term maintenance and compatibility patterns are not yet established.
All five recent commits came from one contributor, creating a concentrated bus factor; organizational ownership partly mitigates handoff risk but does not eliminate the lack of observed contributor diversity.
Five commits from one active maintainer in the last three months show ongoing work, but the low volume and single active contributor limit evidence of sustained maintenance capacity.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and assurance gap rather than evidence that the package is unsafe.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.