Usable with caveats: it is actively released, not deprecated or archived, and has clear documentation and licensing. The repository is very small, has only one recent contributor, and lacks a security policy, so long-term maintenance depends heavily on one person.
72%
Total Score
50
50
83
90
The package has four runtime requirements, including Yii2, gRPC, PHP, and the underlying SDK. These dependencies are relevant to the stated wrapper purpose, though they add compatibility and transitive-maintenance obligations.
Only one registry account has publish access. This is a meaningful operational dependency, although the matching repository ownership and recent activity provide some supporting evidence.
The registry namespace and repository owner match, but the owner is a user rather than an organization. This supports package identity while offering limited institutional continuity.
All recent commits came from one contributor, so maintenance could stop if that person becomes unavailable. The repository is user-owned rather than organization-owned, and no second active contributor compensates for this concentration.
There was 1 commit in the last 3 months from 1 active maintainer, confirming some recent maintenance but showing a very limited activity level.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0 | — | — |
metaseller/tinkoff-invest-api-v2-php Version >=0.5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.