The package includes tests, a usable README, and release notes for this version. Its MIT license and small dependency set make it straightforward to inspect and integrate.
48%
Total Score
50
100
83
75
One registry publishing account indicates a thin publishing base, although the repository and package share the same individual ownership context. This offers little redundancy if that maintainer stops work.
The package has had no registry release in nearly six years, despite eight releases overall. The short historical release intervals do not compensate for the prolonged current inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with no meaningful maintenance since December 2020.
The repository has one star, one fork, and one watcher. Low adoption is supporting evidence of limited project traction, but it is not decisive by itself.
Composer build tooling is present, but no security-scanning tooling was detected. The missing scanning is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.