A PHP sdk for the BoardGameGeek api
61%
Total Score
caution
Usable with caveats: no registry release since 2021 and no commits in the last 3 months.
A post-install command runs during installation, adding execution behavior that consumers must account for. No provided evidence shows that the script is harmful or unusually broad, so this is a modest caution rather than a severe risk.
The package has had no registry release in nearly five years and none in the last 12 months, which is a meaningful sign of possible abandonment. Its seven releases were initially frequent, but that earlier cadence does not offset the long current gap.
The repository recorded zero commits and zero active maintainers in the last three months. The 2025 push shown by repository status is compensating evidence of some later activity, but current development momentum remains weak.
There are three open pull requests and one open issue, but no issues or pull requests were created or merged in the last month. This supports a caution about limited current activity, though it is not proof of abandonment by itself.
Composer is used as the build tool, which fits the package ecosystem. No security scanning tooling was detected, a minor transparency gap for a dependency library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/cache Version ^5.3 | — | — |
symfony/dom-crawler Version ^5.3 | — | — |
symfony/http-client Version ^5.3 | — | — |
symfony/css-selector Version ^5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.