Its small codebase is easy to inspect, with a clear README, matching repository, and no install-time scripts. MIT licensing reduces adoption friction, but the missing security practices leave too little assurance for a new dependency.
39%
Total Score
50
83
50
This is a single-release package first and last released over five years ago, with no releases in the last 12 months. That strongly raises abandonment risk.
The repository recorded no commits and no active maintainers in the last three months, consistent with the release history showing prolonged inactivity.
Composer build tooling is present, but no security scanning tools were detected. This is a meaningful hygiene gap for a package that handles external exchange-rate data.
The linked repository has no security policy, leaving no documented channel or process for handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version >=6.0 | — | — |
amrshawky/currency Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.