Its documentation, tests, licensing, and organization backing provide a solid foundation. The single-release history and no commit activity in the last three months leave long-term support unproven, while no security scanning adds a smaller concern.
67%
Total Score
67
50
88
50
Six runtime dependencies, including HTTP, cache, and mathematical libraries, create a moderate dependency surface that warrants routine update and compatibility attention.
Only one registry account has publish access, which is a modest release-continuity concern; organization backing provides some compensation but does not establish active maintenance by itself.
The package is 385 days old but has only one release, with no releases in the last 12 months; this materially weakens evidence of ongoing maintenance.
There were no commits and no active maintainers during the last three months, reducing confidence that defects and compatibility changes will be handled promptly.
Composer build tooling is present, but no security scanning tools were detected, leaving a repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^3.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
markrogoyski/math-php Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.