Moneybird API client for PHP
72%
Total Score
caution
Usable with caveats: active releases and organization backing offset concentrated maintenance and workflow hygiene risks.
All seven recent commits came from one contributor, creating a real continuity risk; organization ownership provides some handoff capacity but no second recent contributor is shown.
This release is not a prerelease, but the package remains below a stable major version, so API compatibility may still change.
The audit analyzed all 8 workflows but found all 18 action references unpinned, four workflows with top-level write permissions, and a high-confidence bot-condition finding; no untrusted checkout or script-injection sink was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
saloonphp/saloon Version ^3.10|^4.0 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
kelunik/link-header-rfc5988 Version ^1.0 | — | — |
saloonphp/pagination-plugin Version ^2.2|^2.3 | — | — |
saloonphp/rate-limit-plugin Version ^2.0|^2.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.