The small interface is clearly packaged and documented, with a stable MIT release and minimal runtime dependencies. Its source has had no commits for over seven years, and the repository has no security policy or scanning, so maintenance confidence is limited.
52%
Total Score
50
100
79
83
The package has four releases, all apparently concentrated on 21 December 2018, with no releases in the last 12 months. That long period without a release is a meaningful maintenance concern, although a small stable interface may change infrequently.
There were zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive for years. The package's narrow scope may explain infrequent changes, but it does not provide evidence of ongoing maintenance.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap for a package with otherwise simple contents.
The repository is not archived, but its last push was on 21 December 2018. The unarchived status is reassuring, while the old last-push date supports the maintenance concern.
The repository has no security policy. For a small interface-only package this is less serious than for an application, but it still leaves vulnerability-reporting expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.