The MIT license, clear README, and matching repository make the package easy to understand. Its build workflow also leaves two actions unpinned, adding a smaller maintenance risk.
10%
Total Score
0
50
50
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning that the release should not be adopted for new dependencies.
The package has 11 releases since June 2023, but none in the last 12 months; its latest release was about 1 year and 5 months ago. This supports the abandonment concern rather than showing active maintenance.
The repository recorded no commits and no active maintainers in the last 3 months. Together with the archived state, this indicates no current maintenance capacity.
The linked repository is archived, despite being pushed on April 2, 2025. An archived source project is a severe abandonment risk for a package developers must depend on.
The only workflow was fully analyzed with no dangerous sinks or audit findings, but both of its two action references are unpinned. That is a smaller reproducibility and build-integrity hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tcdent/php-restclient Version 0.1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.