The package includes a substantial test suite, README, release notes, and matching MIT licensing. Its single organizational publisher and absent security policy add limited transparency, while the old PHP-era prerelease needs careful compatibility testing.
40%
Total Score
63
50
67
83
The last release was in January 2017, with no releases in the past 12 months; this long pause is strong evidence of abandonment risk.
There were no commits and no active maintainers in the past three months, consistent with the multi-year release gap and indicating severe maintenance risk.
Four runtime dependencies form a moderate dependency surface for a client library; this is not excessive, though the old release increases compatibility uncertainty.
There were no new or closed issues or pull requests in the past month, with five issues remaining open; this supports the conclusion that maintenance has stalled.
Seven stars and four forks show limited adoption, which is supporting evidence of a small project but not decisive on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^5.3.1 | — | — |
doctrine/annotations Version ~1 | — | — |
php-riak/riak-client-pb Version ~1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.