The package is a minimal five-file implementation with no security policy, leaving limited evidence of engineering safeguards. Organization backing and a clean install profile help, but the maintenance and licensing gaps remain significant.
45%
Total Score
100
38
67
The package has had no release in over five years, with zero releases in the last 12 months. Its earlier releases were fairly regular, but the prolonged inactivity is a strong abandonment concern.
No declared license or license file was found, so the legal terms for using this dependency are unclear.
The package is unusually small, containing only five files and one source file. That may fit this narrow SDK, but it provides little visible project depth or supporting documentation.
Composer is used as the build tool, which is appropriate for a PHP package. No security scanning tools were found, leaving a modest maintenance-hygiene gap.
The repository is not archived, but it has not been pushed since July 2021, which supports the release-history concern rather than showing active maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.