The package is small and cleanly structured, with no install-time scripts or workflow findings. Its single release and absent recent maintenance leave little evidence that it will receive fixes or updates.
38%
Total Score
33
50
75
88
This is the only release, published over six years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
The repository had zero commits and zero active maintainers in the last three months. For a dependency with only one old release, that materially increases the risk of unaddressed defects and abandonment.
Seven runtime dependencies create a meaningful maintenance surface for a small, inactive package, though the profile is not inherently excessive for a PHP SDK.
A README and GitHub release are present, but the README is only 17 characters and neither the package nor repository includes tests or a changelog. The missing tests and changelog are not expected in the published artifact, while the minimal README limits consumer guidance.
The repository is owned by an individual user rather than an organization. That does not make the package unhealthy, but it offers less visible organizational backing for a project already showing no recent activity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
scaleplan/dto Version dev-master | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
symfony/validator Version * | — | — |
zircote/swagger-php Version * | — | — |
scaleplan/http-status Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.