Its MIT license, tests, changelog, and matching repository make the package easy to inspect. The single alpha release and no recent commits leave it a poor long-term dependency choice.
15%
Total Score
0
67
50
The package has only one release, published about nine years ago, with no releases in the last 12 months. This is strong evidence that development has stopped.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been abandoned rather than actively maintained.
The assessed version is v0.5.0-alpha, and all recent releases are prereleases. That leaves both maturity and compatibility uncertain, especially alongside the lack of subsequent releases.
The repository has no security policy. For an otherwise active project this would be a hygiene concern; here it adds to the transparency gap around an already inactive package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dazzle-php/loop Version 0.5.* | — | — |
dazzle-php/util Version 0.5.* | — | — |
dazzle-php/event Version 0.5.* | — | — |
dazzle-php/socket Version 0.5.* | — | — |
dazzle-php/promise Version 0.5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.