The package includes tests, a clear README, and MIT licensing, with no install-time scripts. Its young history and single-person ownership provide limited evidence of long-term support, while workflow hardening remains incomplete.
62%
Total Score
50
100
81
83
The registry has one publishing maintainer. The repository is user-owned rather than organization-owned, so there is limited visible redundancy if that maintainer becomes unavailable.
The source repository is owned by an individual account rather than an organization, so there is no provided evidence of broader project backing.
There have been four releases, all within the package's roughly 207-day lifetime, but the very young project and releases concentrated over about eight days provide limited evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful warning for a package still establishing itself.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-client Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.