vesicash/vesicash-php-sdk
The repository is active in ownership terms, matches the package, and includes a usable README with no install-time scripts. The MIT declaration conflicts with the Apache-2.0 license file, and no security policy or scanning tool is present. Pin this version only if its API is already acceptable and you can verify the licensing before adoption.
38%
Total Score
50
67
75
Health Score Breakdown
The package has only one release, published about 5 years and 6 months ago, with no releases in the last 12 months. This is strong evidence of an unmaintained release line despite its stable major version.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the long gap since the package's only release and raising abandonment risk.
The artifact contains a recognized Apache-2.0 license file, but the manifest declares MIT. The presence of a license is positive, while the mismatch creates a material legal and transparency concern.
Composer build tooling is present, but no security-scanning tooling was detected. This is a moderate hygiene gap, though it is less significant than the release and commit inactivity.
The linked repository has no security policy, leaving vulnerability-reporting expectations unclear for an SDK that handles API and payment integrations.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Precious O |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.