A PHP library to connect with, update to and pull data from Amazon MWS.
38%
Total Score
unhealthy
Risky: no release or repository update since 2018, despite a clear license and included tests.
The package is about 8 years old but has only two releases, with no release in the last 12 months and the latest published in March 2018. This is strong evidence of abandonment risk.
The package includes tests and the repository also has tests, which is a positive quality signal. The missing package README is a minor consumer-documentation gap for a library, while the absent changelog is expected to be less significant given the old release.
The registry namespace and repository are owned by the same individual, providing clear ownership context. There is no organizational backing shown to offset the single-person maintenance risk.
The repository has 0 stars, 1 fork, and 2 watchers. This is weak supporting evidence of limited adoption, though popularity alone does not determine package health.
Composer is used for builds, but no security-scanning tools are present. The missing scanning is a transparency and maintenance weakness, though it is less important than the long period without updates.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vlucas/phpdotenv Version ^2.5@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.