The package includes a usable README, examples, and release notes, and its source matches the package. It lacks a license and security policy, which makes long-term use and remediation harder.
12%
Total Score
0
50
75
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe warning against taking a new dependency on the package.
The package has had no release in about 3 years and 5 months, with zero releases in the last 12 months. The seven-release history shows it was established but is no longer maintained.
The repository had no commits and no active maintainers in the last 3 months, reinforcing the abandonment evidence from its archived state.
The linked repository is archived and was last pushed about 3 years ago, so maintainers are unlikely to accept fixes or address new compatibility issues.
Neither the package nor the linked repository provides a declared license or license file. That creates a real adoption and redistribution concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.2 | — | — |
kornrunner/keccak Version ^1.0 | — | — |
simplito/elliptic-php Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.