The package is licensed, documented, tested in the repository, and not deprecated. A single maintainer and no commits in three months leave limited maintenance depth; all workflow actions are unpinned.
68%
Total Score
50
78
67
Only one account has registry publish access. The repository is user-owned rather than organization-backed, leaving little visible redundancy if that maintainer becomes unavailable.
The package has existed since December 2021 with 12 releases and a release in the last year, although only one release occurred during that period.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release offsets this somewhat, but ongoing maintenance capacity is still unclear.
The repository has zero stars and one fork, which is weak supporting evidence for community review or backup, though popularity alone does not determine package health.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brokeyourbike/http-enums Version ^2.0 | — | — |
brokeyourbike/http-client Version ^1.0 | — | — |
brokeyourbike/resolve-uri Version ^1.0 | — | — |
brokeyourbike/has-source-model Version ^3.0 | — | — |
brokeyourbike/data-transfer-object Version ^0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.