Risky to adopt without confirming that it still meets your needs: this release has had no new version or repository activity for about 8 years. The repository is organization-backed and includes tests and a usable README, but licensing is absent and the package's connection to the linked repository is not clearly documented.
45%
Total Score
50
100
61
83
The package has only one release, published about 8 years ago, with no releases in the last 12 months. This is strong evidence of an unmaintained dependency despite the stable 1.0.0 version.
The repository recorded zero commits and zero active maintainers over the last 3 months, consistent with a project that is no longer actively maintained.
Neither a declared license nor a license file was found in the package or repository. That creates a real legal and reuse concern for an open-source dependency.
The repository name does not match the package name and its README does not mention the package, so the package-to-repository relationship is not clearly demonstrated. The mismatch may be normal for a subpackage, but the missing README mention remains a caution.
The repository has zero stars and forks and only three watchers. Popularity is supporting evidence rather than a verdict, but these numbers provide little evidence of broad community oversight.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpro/soap-client Version ^0.2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.