PHP client for the Lightspeed eCom API
58%
Total Score
50
92
50
The latest registry release was over seven years ago, with no releases in the last 12 months. This is a substantial freshness concern, although the repository is not archived and was pushed more recently.
The repository recorded zero commits and zero active maintainers in the last three months, leaving current maintenance capacity unclear despite the repository remaining available.
The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities in an API client.
The single workflow was fully analyzed with no reported audit findings, but both action references are unpinned. The lack of a top-level permissions block is acceptable on its own, while unpinned actions remain a modest reproducibility risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.