php-core/exchange-sdk

Project backingcaution

The package and repository share the php-core owner, but the owner is identified as a user rather than an organization. This offers limited backing evidence without implying a maintenance failure.

Release historycaution

Only two releases were published, and the latest was about 14 months ago, leaving limited evidence of sustained maintenance. The documented 1.0.1 release notes provide useful transparency but do not offset the long pause.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, and no open work was reported. Combined with the old latest release, this provides little evidence of active maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is not required for a small package, but these counters provide no supporting evidence of external adoption or review.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap rather than evidence that the package is unsafe.