Usable with caveats: the package is licensed, documented, correctly backed by its organization, and has recent stable releases. However, it has had no commits or active maintainers in the last three months, with no tests or security scanning, so ongoing maintenance should be verified before adopting it broadly.
68%
Total Score
75
100
89
90
The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete maintenance concern for a package that depends on an external API.
The repository has no stars, forks, or watchers. This is weak supporting evidence rather than a decisive problem, especially for a small organization-owned client.
Composer is used as the build tool, but no security scanning tool is configured, leaving a modest transparency and maintenance gap.
The repository has no security policy, reducing clarity about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0|^7.9|^7.10 | — | — |
sharpapi/php-core Version ^1.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.