The README gives practical installation and issue-reporting guidance, and the package has a substantial, focused source tree. Its license declaration mixes GPL-3.0-only with proprietary terms, while maintenance and provenance cannot be fully verified because the repository could not be found.
76%
Total Score
50
90
100
Thirteen runtime dependencies, including the OXID platform and common PHP libraries, create a meaningful dependency surface but are plausible for the package's database, API, transfer, XML, and logging features.
The manifest declares both GPL-3.0-only and proprietary terms, so the package is not unlicensed but its redistribution and usage obligations need clarification before adoption.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
fale/isbn Version >=v3.1 | — | — |
guzzlehttp/guzzle Version ^7 | — | — |
html2text/html2text Version >=v4.3 | — | — |
oxid-esales/oxideshop-ce Version >=v7.4 | — | — |
mobiledetect/mobiledetectlib Version >=v2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.