Tests, a usable README, matching MIT licensing, and a non-archived repository provide a solid project foundation. The modest dependency set and lack of install scripts reduce avoidable integration risk, but there is no recent security policy or scanning.
40%
Total Score
50
79
75
The latest release was nearly seven years ago, with no releases in the last 12 months. That long gap materially raises abandonment and compatibility risk.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the evidence that maintenance has stopped.
There were no new issues, pull requests, or merges in the last month. This is secondary evidence of inactivity, though it does not by itself prove abandonment.
Composer build tooling is present, but no security scanning tools were detected. That leaves a maintenance and transparency gap for a package with no recent activity.
The linked repository has no security policy, so users have no documented route for reporting vulnerabilities or understanding security handling.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.1 | — | — |
meng-tian/php-async-soap Version ~1.0 | — | — |
meng-tian/soap-http-binding Version ~0.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.