The package includes an MIT license, tests, a README, and release notes for this version. Its last release and repository update were in August 2017, with no commits in the past three months, so current compatibility and support cannot be relied on.
15%
Total Score
0
40
50
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning against taking a new dependency on it.
The package has had no release in over nine years; its four releases all occurred in 2017. That makes compatibility and bug-fix support highly uncertain.
There were no commits and no active maintainers in the past three months, consistent with the repository being abandoned rather than merely quiet between releases.
The linked repository is archived and was last pushed in August 2017, so the project is no longer accepting normal maintenance activity.
The repository has no security policy. This is a secondary transparency gap, and it adds concern because the project also shows no recent maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.0 | — | — |
zendframework/zend-diactoros Version ^1.4 | — | — |
zendframework/zend-expressive-platesrenderer Version ^1.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.