WebSocket server and client for the PRADO PHP framework: RFC 6455 over HTTP/1.1, with HTTP/2 (RFC 8441) via nghttp2.
68%
Total Score
caution
Usable with caveats: all recent commits come from one contributor and every workflow action reference is unpinned.
The repository is owned by an individual user rather than an organization, so there is no provided organizational backing to offset the concentrated contributor activity.
The package has three releases over 51 days, with a median interval of about 26 days. This shows active early development, although the short history provides limited evidence of long-term maintenance.
One contributor made all 12 commits in the last 3 months, giving the project a complete single-contributor concentration. No organization backing is shown to compensate for that dependency on one person.
There were 12 commits in the last 3 months, so development is ongoing. However, all activity came from one active maintainer, limiting resilience if that contributor stops maintaining it.
Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pradosoft/prado Version ^4.4@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.