The package is small and has a clear source repository, but its documentation is effectively unfinished and maintenance has stopped. The license mismatch and absent security policy add transparency concerns, while the organization backing and non-archived status provide limited reassurance.
48%
Total Score
50
100
71
83
The latest release was over four years ago, with no releases in the last 12 months. That strongly suggests the package is no longer actively maintained, although its 16-release history shows it was previously developed.
The repository recorded 0 commits and 0 active maintainers in the last three months. Together with the old latest release, this indicates a sustained maintenance gap rather than a brief pause.
A license file is present and the repository also has one, so this is not an unlicensed release. However, the manifest declares GPL-3.0 while the artifact license file is detected as MIT, creating an unresolved licensing mismatch.
The artifact includes a README, but it is only 6 characters and contains '# TODO'; the repository also has no tests or changelog. Missing tests and changelog are normal for published artifacts, but the unfinished consumer documentation is a real transparency gap.
There were no new or closed issues or pull requests in the last month, while 5 pull requests remain open. This is consistent with an inactive project and provides no evidence that pending work is being handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sensiolabs/consul-php-sdk Version ^3.1 | — | — |
simplesamlphp/composer-module-installer Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.