Clear documentation, tests, and release notes make integration easier. Recent commit activity is absent, while the single publisher and unpinned workflow actions add maintenance and build-hygiene concerns.
68%
Total Score
50
50
94
67
The release has 13 runtime dependencies, including several PSR and HTTP components; this is a meaningful dependency surface but not by itself evidence of poor health.
Only one registry account has publishing access. That limits publishing redundancy, although the linked repository and release history show an active project rather than an abandoned package.
The package and repository are owned by the same individual, so there is no organization backing shown to compensate for the small maintainer base.
The repository recorded zero commits and zero active maintainers in the last three months. Recent releases partly compensate for this, but the lack of current code activity raises maintenance risk.
There are no open issues and five open pull requests, but no issues or pull requests were merged in the last month, so current responsiveness is unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^2.6 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
php-http/discovery Version ^1.19 | — | — |
symfony/serializer Version ^6.4|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.