PHP Client for the Growatt API
66%
Total Score
caution
Usable with caveats: no releases in 18 months and all recent commits come from one contributor.
The package has 12 releases since May 2023, but none in the last 12 months; the latest release was about 18 months ago, indicating slowing maintenance.
One contributor made all recent commits, creating a narrow maintenance base; organization backing provides some handoff capacity but does not show a second active contributor.
Only one commit was recorded in the last three months, showing limited recent development activity and reinforcing the long release gap.
The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a minor transparency gap rather than evidence of abandonment.
All three workflows use read-only permissions and the audit completed fully, but five of five action references are unpinned and two high-confidence findings identify unpinned container images.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.