The package includes tests, Psalm scanning, and a clear MIT license. Its small project footprint and unpinned workflow actions add modest maintenance and build-integrity concerns.
55%
Total Score
50
100
81
75
The package has 92 releases since May 2019, but none in the last five years; the latest registry release was in August 2021. This is a substantial maintenance concern despite the earlier release history.
There were no commits and no active maintainers in the last three months, consistent with a largely inactive project. This increases abandonment risk for a package last released years ago.
There were no new or closed issues in the last month, while four pull requests remain open. The lack of issue activity is neutral, but unresolved pull requests provide a small sign of limited follow-through.
The linked repository name does not match the package name, and the repository README could not be confirmed to mention the package. That creates some uncertainty about whether the repository is the intended source, although a subpackage or related project can explain a mismatch.
No repository security policy was found. This is a transparency gap, though it is less significant than the project's inactivity and does not by itself make the release unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0 || ^1.1 | — | — |
ringcentral/psr7 Version ^1.3 | — | — |
guzzlehttp/guzzle Version ~7 | — | — |
logicalsteps/async Version ^2.0 | — | — |
hansott/psr7-cookies Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.