Package Health

yaguin/itau-sdk

Biblioteca para

Latest 2.0PackagistPackagist

42%

Total Score

unhealthy

Risky: no release or commit activity for nearly four years, plus the repository does not clearly identify this package.

Health Score Breakdown

Release historydanger

The package is nearly four years old but has only 3 releases, all concentrated within about 4 days, with no releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

There were 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no observed ongoing maintenance.

Dependency profilecaution

The package declares 8 runtime dependencies, including Guzzle, Symfony components, and dotenv. This is a meaningful dependency surface for a small, inactive package, though no direct dependency failure is shown.

Maintainerscaution

Only one registry publishing account is listed. That is a thin publishing base and increases continuity risk when combined with the absence of recent activity.

Package scaffoldingcaution

The artifact includes a README and tests, and the repository also contains tests and uses GitHub Releases. The README is very short and appears poorly encoded, limiting its usefulness to consumers.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Yago Fernandes

Direct Dependencies

DependencyLast ReleaseScore
nesbot/carbon
Version ^2.28
—
—
league/flysystem
Version ^1.0
—
—
vlucas/phpdotenv
Version ^5.4
—
—
guzzlehttp/guzzle
Version ^7.3
—
—
tightenco/collect
Version ^7.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform