A small helper to place orders using API keys from env/config.
58%
Total Score
caution
Usable with caveats: no commits in the past three months and only one registry maintainer.
There were zero commits and zero active maintainers during the past three months, which is a concrete maintenance concern for a package released less than a year ago.
The package and repository are owned by the same individual account; this is coherent ownership, but it does not provide organization-level backing.
The package is about 323 days old with four releases, all within the first few days; this shows initial activity but little sustained release history afterward.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the thin maintenance record.
Composer is used for the build, but no security-scanning tools are present, leaving the project with limited visible security-process coverage.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.