Connect to cookiedatabase.org API
56%
Total Score
caution
No releases since April 2020 and no recent commits make maintenance uncertain despite a small, tested package.
Only two releases are recorded, with the latest in April 2020 and none during the last 12 months. That long release gap is a meaningful maintenance concern for a dependency.
There were no commits and no active maintainers during the last three months. Combined with the older last repository push, this is a direct sign of inactive maintenance.
There are no open issues and one open pull request, with no issues or pull requests merged during the last month. This provides little evidence of current maintenance.
The repository has one star, zero forks, and one watcher. Low popularity is only supporting evidence, but it suggests limited external validation and community depth.
Composer is used for builds, but no security scanning tool is configured. The missing scanner is a hygiene gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.2.1 | — | — |
kriswallsmith/buzz Version ^1.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.