The project has little recent activity and only one active contributor. Its documentation explicitly directs users to a newer SDK, so this release should not be adopted for new integrations.
15%
Total Score
67
100
50
75
This package explicitly borrows the identity of mercadopago/dx-php, which has far more monthly downloads and stable releases; the README also identifies it as the lookalike. Consumers most likely wanted the newer package instead.
Packagist marks the entire package as abandoned, with no replacement recorded. Package-level deprecation is a severe adoption risk rather than a warning limited to this release.
The latest release was published in April 2019, with no releases in the following 12 months. That long release gap is consistent with the package being abandoned.
One contributor made 100% of the recent commits. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.
The repository recorded only one commit in the last three months. This provides little evidence of active maintenance for a deprecated SDK.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.