The package is documented, licensed, tested, and has a small dependency set. Those positives do not offset the abandoned release line, archived repository, and inactive development; choose a maintained replacement instead.
12%
Total Score
25
100
50
83
Packagist marks the entire package as abandoned, with no replacement provided. Package-wide deprecation is a direct warning against taking a new dependency on this release.
The package has only 3 releases, with the latest published on March 9, 2017 and none in the last 12 months. This roughly nine-year release gap is strong evidence of abandonment.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This confirms there is no current development activity to compensate for the old release history.
The linked repository is archived, and its last push was on February 25, 2022. Archived source strongly indicates that maintenance and issue response should not be expected.
There were 0 new or closed issues and 0 new or merged pull requests in the last month, while 7 issues and 5 pull requests remain open. That combination suggests unresolved maintenance demand.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fig/http-message-util Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.