The repository includes tests, a substantial README, matching package references, and an MIT license. Its 38 releases arrived within about 21 hours, but there have been no commits in three months; all six workflow actions are also unpinned and no security policy is provided.
52%
Total Score
67
100
78
83
The package has 38 releases, but they were published within about 21 hours and no later release followed during its 205-day lifetime. This burst followed by a long release pause is a maintenance concern.
There were zero commits and zero active maintainers in the last three months. Combined with the release pause, this indicates the project may no longer be actively maintained.
There were no new issues or pull requests in the last month and no merged pull requests. This is weak evidence of current community activity, though issue counts are partly unknown.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external adoption signal to offset the limited maintenance history.
The repository uses Composer build tooling, but no security-scanning tools were detected. That leaves security checks less transparent, without proving a security defect.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
league/uri Version ^6.3 || ^7.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
webmozart/assert Version ^1.4 || ^2.0 | — | — |
respect/validation Version ^3.0 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.