It has clear documentation, tests, an MIT license, and no install-time scripts. The small project footprint and lack of a security policy add modest uncertainty.
55%
Total Score
50
92
75
This is the only release, published 1 year and 9 months ago, with no releases in the last 12 months. That makes ongoing maintenance uncertain despite the package being mature enough to have a stable v1.0.0.
The repository has had no commits and no active maintainers in the last 3 months, consistent with the long release gap. The repository is not archived, but there is no recent activity demonstrating continued maintenance.
The linked repository has no security policy. This is a transparency and maintenance gap, though it is less significant for a small SDK than evidence of abandonment would be.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.7 | — | — |
guzzlehttp/guzzle Version ^7.9.0 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.