The package has clear documentation, a matching license, and a focused source tree with a changelog. Its small user and contributor footprint leaves little evidence of ongoing support if dependencies or the platform change.
48%
Total Score
25
78
50
The package has only 3 releases, all within a short early period, and none in the last 12 months; the latest release was over a year ago. This is strong evidence of stalled maintenance for a young SDK.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, providing no recent evidence that defects or dependency changes are being addressed.
Only one registry publishing account is listed, leaving a thin operational base. The repository is user-owned rather than organization-owned, so there is no provided backing signal to offset that concentration.
The repository has 0 stars, 0 forks, and 0 watchers. Popularity is supporting evidence rather than a verdict, but these values provide no additional adoption or community-maintenance confidence.
Composer build tooling is present, but no security scanning tools are reported. That leaves automated security checks unverified without making the release unsafe on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/di Version ^3.0 | — | — |
hyperf/pool Version ^3.0 | — | — |
hyperf/config Version ^3.0 | — | — |
hyperf/guzzle Version ^3.0 | — | — |
hyperf/logger Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.