PHP SDK for Brex
58%
Total Score
caution
Usable with caveats: release activity has stopped, recent commits are absent, and all audited actions are unpinned.
Only two releases exist, with none in the last 12 months and a median interval of about 495 days; the latest release is over two years old, which raises abandonment and freshness concerns.
There were no commits and no active maintainers in the last three months, a material sign of slowing maintenance for an SDK handling financial API integrations.
The audit found no dangerous sinks or high-severity findings, but it analyzed only four of five workflows and all five action references were unpinned, leaving supply-chain hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.5 | — | — |
php-http/httplug Version ^2.3 | — | — |
psr/http-message Version ^1.0 | — | — |
php-http/discovery Version ^1.14 | — | — |
php-http/message-factory Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.