Usable with caveats: the package is young but has a stable release, regular releases, clear documentation, and an active-looking repository. Its single maintainer, lack of tests and security policy, and minimal repository activity leave limited evidence of long-term maintenance.
70%
Total Score
67
100
94
83
Only one registry account has publishing access, so the release process has a thin visible publisher base. The repository is backed by the matching quellabs owner, but that does not provide evidence of a broader maintainer team.
There are no open issues or pull requests and no activity in the last month. With no reported backlog this is not directly negative, but it provides little evidence of an active user or contributor community.
The repository uses Composer, appropriate for this PHP package, but no security-scanning tools were detected. That leaves a modest transparency and maintenance gap for a package handling API credentials and webhooks.
No repository security policy was found. While this is not evidence of a vulnerability, it provides no documented process for reporting or handling security issues.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
quellabs/support Version * | — | — |
quellabs/contracts Version * | — | — |
symfony/http-client Version ^7.0 || ^8.0 | — | — |
quellabs/canvas-shipments-contracts Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.