The package includes tests, release notes, dependency scanning, and readme documentation. Maintenance is currently concentrated in one contributor, and the release line remains v0.0.x with no registry release in about 14 months.
68%
Total Score
75
100
88
83
The package has seven releases since June 2020, but none in the last 12 months; the latest registry release was about 14 months before collection. The linked repository's recent activity partly offsets this, but the registry cadence is still a caution.
One contributor made all commits in the last three months, creating concentration risk. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe risk.
Only one commit occurred in the last three months, indicating limited recent implementation activity. Recent pull-request activity provides partial compensation, but the direct commit cadence remains thin.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, but it does not by itself make the package unfit.
v0.0.7 is not a stable major release, so the public API may still change between versions. It is not marked as a prerelease, which provides some compensation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.3 | — | — |
predis/predis Version ^1.0 | — | — |
guzzlehttp/psr7 Version ^1.0 | — | — |
solarium/solarium Version ^6.2 | — | — |
nyholm/psr7-server Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.