Usable with caveats: it has a clear MIT license, tests, documentation, and an active-looking repository that is not archived. However, the last package release was nearly five years ago, there has been no recent commit activity, and the project depends on a single maintainer.
58%
Total Score
50
100
79
75
The registry namespace and repository owner match, so the source appears to be backed by the same individual rather than an unrelated organization. That provides ownership consistency but limited organizational redundancy.
The latest release was nearly five years ago, with no releases in the last 12 months. That is a meaningful maintenance concern for a client tied to an evolving external REST API.
There were no commits and no active maintainers in the last three months, consistent with a project that is currently dormant. This is the strongest reason to expect delayed fixes or compatibility updates.
There are no new or closed issues in the last month, and two pull requests remain open. The small issue volume is not concerning by itself, but the unmerged pull requests reinforce the signs of limited maintenance.
Composer build tooling is present, but no security scanning tools were detected. For a small PHP client this is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.0.0 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.