Tests, a changelog, and a matching organization-backed repository provide useful context for consumers. The large runtime dependency set increases maintenance exposure, while the absence of a security policy leaves little guidance for reporting problems.
40%
Total Score
50
50
75
50
The package has 20 releases but none in the last 12 months, and its latest release was nearly 10 years ago. This is strong evidence that maintenance has stopped despite a historically regular cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months, matching the long release gap and indicating no current development activity.
The package declares 30 runtime dependencies, creating a broad maintenance and compatibility surface for an old PHP library. No provided signal shows that this dependency burden is being actively managed today.
The repository has no security policy, so consumers have no documented process for reporting vulnerabilities or learning how security issues are handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzle/http Version ~3.9 | — | — |
lcobucci/jwt Version ^3.1 | — | — |
rezzza/flickr Version ~1.1 | — | — |
smarty/smarty Version ~3.1 | — | — |
doctrine/cache Version ~1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.