Documentation and tests make integration clearer, and the package has a declared Apache-2.0 license. Its short release history and no recent repository commits leave maintenance capacity uncertain; no security scanning or policy is visible.
58%
Total Score
50
100
83
50
The repository owner is an individual account rather than an organization, so the short activity record is not visibly supported by organizational backing.
The package is only 181 days old with two releases, about 31 days apart. This shows some initial activity but provides little long-term evidence of sustained maintenance.
There were zero commits and zero active maintainers in the last three months. For a package this young, that is a meaningful warning about current maintenance capacity.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no additional evidence of community review or adoption.
Composer build tooling is present, but no security scanning tools were detected. This reduces transparency around automated security checks without making the release unfit by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
easyswoole/http-client Version ^1.2.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.