This is a usable and reasonably transparent package with a stable 1.0.10 release, 601 days of history, 11 releases, a recent release, a matching repository, an MIT license, packaged tests, and no deprecation or install-time scripts. However, maintenance capacity appears thin: only one commit and one active contributor in the last 3 months, all recent commits from one contributor, zero stars and forks, and no repository security policy or security-scanning tooling. The package is suitable to depend on with normal maintenance and security monitoring, but it does not yet demonstrate the depth or redundancy of a highly mature dependency.
72%
Total Score
60
100
89
90
Only one registry account has publish access. This is a transparency and continuity caution, although repository activity provides evidence of an associated maintainer rather than an entirely inactive package.
The repository is owned by an individual user rather than an organization, so there is no organizational backing to compensate for the thin maintainer base.
All recent commits come from a single contributor, creating a concentrated maintenance dependency with no demonstrated handoff or redundancy.
Only one commit was made by one active maintainer in the last 3 months. Recent work exists, but the low activity level warrants caution about maintenance momentum.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little external evidence of maturity or community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.1 || ^2.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.