The declared MIT license and included tests provide a basic foundation, but the 0.x release line offers limited maturity evidence. Development activity has been absent for three months, and the README gives consumers almost no integration guidance.
62%
Total Score
50
67
50
The artifact includes a README, tests, and a GitHub release for this version. The README is only 47 characters and says documentation is forthcoming, so consumer guidance remains limited.
The package is about 2 years and 6 months old with six releases, but only one release occurred in the last 12 months. This indicates a thin release history rather than strong ongoing development.
The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed recently, the short-term development record is too thin to demonstrate sustained maintenance.
Composer is used for the build, but no security scanning tooling is present. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This lowers project transparency for a library handling API credentials and network requests.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version * | — | — |
rakit/validation Version * | — | — |
guzzlehttp/guzzle Version * | — | — |
illuminate/support Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.