Usable with caveats: this is a very new, tiny package with only two releases and no observed commit activity yet. The repository matches the package and has build and security scanning tools, but the short README, absent tests, and missing security policy leave limited evidence of maturity.
61%
Total Score
50
100
88
88
A README is present, but it is only 87 characters and gives little integration guidance; the absence of tests and a changelog in the published artifact is normal packaging practice for this kind of package.
The package is backed by a personal repository owner rather than an organization, so ongoing maintenance depends on a small apparent ownership base.
The package was first released today and has only two releases, so there is too little history to establish maintenance reliability or long-term stability.
There were no commits and no active maintainers in the last three months, but the repository and package are less than a day old, so this is weak evidence of abandonment rather than a severe warning.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported, though the package is very small and newly published.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.8 | — | — |
arout/rhapsody-core Version ^2.0 || dev-main | — | — |
spiral/roadrunner-http Version ^3.3 | — | — |
spiral/roadrunner-worker Version ^3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.