The package includes clear usage documentation, a stable version, and no install-time scripts. Its dependency set and missing security tooling add maintenance overhead. The project is small and appears inactive, so future fixes and compatibility work are uncertain.
43%
Total Score
0
50
61
83
The latest release was published nearly five years ago, with no releases in the last 12 months. Five releases show some history, but the prolonged gap is a meaningful abandonment concern.
There were no commits and no active maintainers in the last three months. Combined with the old last push, this is strong evidence that maintenance has stopped.
The repository name does not match the package and its README does not mention the package. This raises concern that the published package may not be backed by the linked source repository.
Ten runtime dependencies, including HTTP, logging, framework, and cache components, create meaningful compatibility and maintenance surface for an old SDK.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these counters provide no supporting evidence of an active user or contributor community.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
pimple/pimple Version ^3.0 | — | — |
doctrine/cache Version 1.10.* | — | — |
monolog/monolog Version ^1.22 || ^2.0 | — | — |
guzzlehttp/guzzle Version ~6.5 | — | — |
symfony/http-foundation Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.