Documentation, tests, release notes, and a matching repository make the package transparent. Its broad dependency set and single registry publisher add maintenance exposure, despite organization backing.
58%
Total Score
50
50
78
100
The package has 15 releases since December 2023, but none in the 12 months before assessment and its latest release was in April 2024. This long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating no recent maintenance capacity.
The package declares 11 runtime dependencies, including several closely coupled TomatoPHP packages. That broad dependency surface increases upgrade and compatibility exposure.
One registry publisher creates a narrow publishing base, but the project is owned by an organization, which provides some backing and offsets part of the concentration risk.
The repository has only 2 stars and 1 fork, so there is limited visible community support or redundancy if the maintainer stops responding.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
milon/barcode Version ^10.0 | — | — |
tomatophp/tomato-crm Version ^1.1 | — | — |
tomatophp/tomato-orders Version ^1.0 | — | — |
tomatophp/tomato-wallet Version ^1.0 | — | — |
tomatophp/tomato-coupons Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.