Usable with caveats: the package is clearly backed by a matching organization repository with tests, documentation, and an MIT license, but it has had no release or commit activity for nearly three years. Depend on it only if its older SOAP implementation fits your needs and you can maintain it yourself.
58%
Total Score
75
100
72
88
There have been 10 releases since 2016, but none in the last 12 months and the latest release was nearly three years ago, indicating substantial maintenance stagnation.
The repository recorded zero commits and zero active maintainers in the last three months; together with the old last release, this is the main abandonment concern.
There are no open issues and only one open pull request, but there was no issue or pull-request activity in the last month, offering little evidence of current maintenance.
The repository has only 5 stars and 6 forks, indicating limited adoption, but popularity is supporting evidence and does not outweigh the stronger maintenance and project-structure signals.
Composer build tooling is present, but no security scanning tools are configured. This is a modest transparency gap, not a severe risk, especially for a small inactive PHP library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.0|^4.0 | — | — |
symfony/event-dispatcher Version ^4.0|^5.0|^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.