PSR
35%
Total Score
50
100
64
100
The package is explicitly marked abandoned at the package level, with a replacement provided, which is a severe adoption and continuity concern despite the linked repository still being active.
The artifact and repository contain no tests or changelog, and the README is only seven characters long; GitHub Releases provide some release traceability, but transparency and verification remain weak.
The package has six releases over about 19 months but only one release in the last 12 months; this indicates limited recent release activity, although the latest release is recent.
All recent commits come from one contributor, creating a meaningful continuity risk for a user-owned project with no organizational backing signal.
The repository recorded one commit in the last three months from one active maintainer, showing some current activity but very limited demonstrated maintenance capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.