The package includes tests, a substantial README, and no install-time scripts. Its license metadata conflicts with the GPL-3.0 license file, so verify the terms before adoption.
58%
Total Score
50
64
50
A license file is present and identifies GPL-3.0, but the manifest declares the package proprietary. This mismatch creates a real transparency and adoption risk that should be resolved before use.
Only one account has registry publish access, leaving little visible publishing redundancy. The repository is user-owned rather than organization-backed, so there is no provided evidence of a broader maintenance team.
The package has 50 releases, but none in the last two years and the latest release was in July 2024. That long pause is a meaningful maintenance concern despite its previously frequent release cadence.
There are no open issues or pull requests and no issue or pull-request activity in the last month. While this may reflect a quiet project, it does not provide evidence of active community support.
The repository has 2 stars, 1 fork, and 1 watcher. Low popularity is only supporting evidence, but it provides little external indication of adoption or community resilience.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aws/aws-sdk-php Version ^3.107 | — | — |
phpunit/phpunit Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.