The MIT license, clear README, and small dependency set make adoption straightforward. The repository has tests, but no security scanning or policy and only one registry maintainer leave limited assurance.
64%
Total Score
50
100
83
75
One account has registry publishing access. This is limited publishing redundancy, though it does not by itself establish that project development is inactive.
Only three releases exist across 102 days, so the project has limited operating history, although the latest release was published recently.
There were no commits or active maintainers in the past three months, which weakens evidence of ongoing maintenance despite the repository being pushed at the latest scan.
The repository has one star and no forks or watchers, indicating very little observed adoption. Popularity is supporting evidence rather than a health verdict on its own.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
php-http/discovery Version ^1.20 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.