Clear documentation, repository tests, and a matching source tree support traceability. However, the package and repository have seen no activity for about eight years, making abandonment a serious concern.
42%
Total Score
25
100
67
83
The package has 110 releases but none in the last eight years, so its maintenance appears to have stopped despite a substantial historical release record.
There were zero commits and zero active maintainers in the last three months, reinforcing the strong abandonment concern from the release history.
The repository is not marked archived, but its last push was about eight years ago, which is consistent with the lack of current maintenance evidence.
The package and repository are owned by the same individual account rather than an organization, so the two registry maintainers do not demonstrate broader project backing.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than decisive, but these values provide no additional backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.4 | — | — |
guzzlehttp/promises Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.