Documentation and test coverage make integration easier. The project is young, has limited repository activity, and lacks a security policy, so pinning this alpha release warrants care.
68%
Total Score
50
100
79
75
The package is only 67 days old with three releases and a median interval of about 34 days, showing activity but limited long-term evidence.
Two contributors are active, but one accounts for two of the three recent commits; this is a modest concentration risk for an individually owned project.
Three commits from two active maintainers in the last three months show ongoing work, but the small volume reflects a young project with limited maintenance history.
The repository has zero stars, forks, and watchers. Popularity is not required for a healthy package, but these counts provide no supporting evidence of broader adoption.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a client library that handles API credentials.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.1 || ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.