The small dependency set and clear usage README help, while the MIT declaration and current repository provide basic transparency. Limited security tooling and a one-person project leave less evidence of durable maintenance.
55%
Total Score
50
100
75
75
The registry lists one maintainer, which creates a thin publishing base and increases continuity risk; the linked repository is also owned by an individual rather than an organization.
Only 3 releases have appeared over 878 days, with a median gap of about 439 days; one release in the last 12 months and a current latest release provide some evidence of ongoing publishing, but cadence remains sparse.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. A recent repository push and release show current activity, but the observed short-term development record is still limited.
Composer build tooling is present, but no security-scanning tools were detected, leaving less automated protection for a package that handles external API credentials.
The repository has no security policy, so consumers are given no documented reporting or response process for vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version * | — | — |
facebook/php-business-sdk Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.