The MIT license, usable README, matching repository, and absence of install-time scripts make adoption straightforward. Security scanning and automated workflows are absent, so maintenance depends heavily on the single project owner.
60%
Total Score
50
100
75
75
The package has 329 releases since January 2021, but none in the last 12 months and the latest release was in November 2024. The long release history shows prior maturity, while the current pause raises maintenance risk.
There were no commits and no active maintainers in the last three months. This is the strongest maintenance concern because the package has no recent development evidence.
There were no new or closed issues or pull requests in the last month, and no work is currently queued. This is compatible with a small stable project but provides little evidence of active maintenance.
The repository has 4 stars, 6 forks, and 2 watchers, indicating a small user and contributor footprint. Low popularity is supporting evidence only, but it offers little external maintenance capacity to offset the inactive period.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
api-platform/core Version ~3.0 | — | — |
team-blue/php-util Version ^0.4.4 | — | — |
team-blue/php-value-objects Version ^0.5.5 | — | — |
chrisguitarguy/request-id-bundle Version ~6.0 | — | — |
team-blue/php-json-immutable-objects Version ^0.5.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.