A clear MIT license, matching source repository, and small dependency surface support transparency. The single publisher account and absent security policy provide less evidence of long-term support.
55%
Total Score
50
83
50
The package has had only two releases, both in December 2020, with no releases in the last 12 months. This strongly limits evidence of ongoing maintenance, though the latest version is stable rather than experimental.
Only one registry publishing account is listed, so the release has a thin publishing base. Because the linked repository is owned by the same individual, this is a modest resilience concern rather than a severe ownership mismatch.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project whose development has stopped. The repository is not archived, which provides only limited compensation.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package that integrates with an external SMS API.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.