OneSignal API client for PHP
72%
Total Score
75
100
83
75
The release includes a README and GitHub release notes stating “Add users, minor fixes,” providing some consumer and release context. The README is only 23 characters long and the repository has no tests or changelog, limiting documentation and verification evidence.
There were no commits and no active maintainers in the last three months, which is a maintenance concern. The recent release and repository push provide some compensating evidence, but do not show sustained development activity.
The repository has zero stars, forks, and watchers, indicating little visible adoption or external review. Popularity is supporting evidence only, so this lowers confidence more than it determines the health verdict.
Composer is used for the build, but no security scanning tooling is present. This is a modest transparency gap rather than a severe risk for this small PHP client.
The repository has no security policy, leaving vulnerability-reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.