Clear documentation, tests, changelog, and a security policy make integration straightforward. The package has only 44 days of history and its workflow uses four unpinned actions, so long-term maturity is not yet proven.
78%
Total Score
100
100
75
100
The package resembles messagebird/php-rest-api and reports borrowing its lookalike identity, creating a meaningful risk of consumer confusion. Very low artifact overlap and the README's clear identification of this SDK indicate it is not simply a copied artifact, limiting the concern to caution.
The package is only 44 days old but has 54 releases, with releases arriving roughly every 7 hours. This shows active publishing but leaves little evidence of long-term maintenance stability.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone does not outweigh the active organization-backed release and repository signals.
The project uses Make and Composer, showing build structure, but no security-scanning tool was detected, leaving a modest security-process gap.
The assessed version is a stable non-prerelease release, although the package remains below a stable major version and has a very short observed history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.8 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
php-http/discovery Version ^1.19 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.