The package is well documented, clearly matched to its source repository, and has a narrow runtime dependency profile. Licensing is explicit, but the project provides limited independent safety evidence for long-term adoption.
61%
Total Score
50
100
81
75
The artifact includes a substantial 4,658-character README, which helps consumers integrate this SDK. Missing tests and a changelog in the package are normal for published artifacts, while the repository also reports no tests or changelog, limiting project transparency somewhat.
The package is only 95 days old, with all 13 releases clustered in roughly four days. That shows active initial publishing but provides little evidence of sustained maintenance.
One contributor made all 13 commits in the last three months. With a user-owned project and no second active contributor, maintenance continuity depends entirely on one person.
The repository recorded 13 commits in the last three months, showing some development activity, but the activity appears concentrated early in this young project's life.
Composer is used for builds, which is appropriate for this PHP package, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.