Consumer documentation is missing, and the package has only one registry maintainer. The repository could not be found, leaving maintenance and provenance unverified; pinning this old release is risky.
32%
Total Score
33
The latest release was over nine years ago, with no releases in the last 12 months. Although 22 releases show earlier activity, the prolonged silence is a strong abandonment concern.
The manifest declares “PHP,” which is not a recognized software license, and no license file was detected. This leaves the legal terms for use unclear.
The package artifact has no README, which makes integrating this library harder. Missing tests and a changelog are normal for a published artifact and do not add concern here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tkachinc/core Version ~3.1 | — | — |
evenement/evenement Version 2.0.* | — | — |
facebook/php-sdk-v4 Version 5.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.