PHP SDK for Nacos service discovery and configuration
64%
Total Score
63
100
88
83
Two registry publishing accounts provide limited publishing redundancy, but this is weaker evidence than repository activity and does not show a broad maintenance base.
The repository is owned by a personal user account rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
One contributor made all 10 commits in the last 3 months, leaving no demonstrated backup maintainer if that contributor becomes unavailable.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any community footprint provides little external validation for this young package.
Composer is used for builds, but no security scanning tools were detected. The missing scanning is a hygiene weakness rather than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
guzzlehttp/guzzle Version ^6.0 || ^7.0 | — | — |
symfony/options-resolver Version ^5.0 || ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.