This is a usable but very new package with reasonable transparency and repository hygiene: it has an MIT license, documentation, a changelog, repository tests, security policy, read-only workflow permissions, dependency and security tooling, and no install-time scripts or registry deprecation. However, the release is only 0 days old with a single published version, the project is still on major version 0, commit activity shows 0 commits and 0 active maintainers in the last 3 months, and registry publishing is controlled by one maintainer. Those signals make maintenance maturity and continuity uncertain, so depend on it cautiously and validate that its verifier integration and security-sensitive behavior meet your needs.
68%
Total Score
50
100
83
100
Only one account has registry publish access. Because the repository is user-owned rather than organization-owned, the thin publishing base provides limited continuity if that maintainer becomes unavailable.
The repository is owned by an individual user rather than an organization, so there is no organizational backing signal to offset the single-maintainer continuity concern.
This package has only one release and is 0 days old, so there is no demonstrated release history or cadence from which to assess maturity and sustained maintenance.
The repository records 0 commits and 0 active maintainers over the last 3 months. Given that the package is newly released, this may partly reflect its age, but it leaves sustained maintenance unproven.
There are no open issues and one open pull request, with one new pull request in the last month; this shows some interaction but no completed pull-request activity yet.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.