Tests, a README, and an MIT license make the code easier to inspect. Its 11 runtime dependencies and absent security policy add maintenance and transparency concerns; prefer an actively maintained alternative.
38%
Total Score
25
50
60
50
The package has had only one release, published about 10 years ago, with no releases in the last 12 months. This is strong evidence that the release line is abandoned.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring about 10 years ago. No provided signal shows ongoing maintenance.
The package declares 11 runtime dependencies, creating a relatively broad dependency surface for a small library and increasing the maintenance burden. No compensating dependency signal was provided.
There were no new or merged issues or pull requests in the last month. With the long release gap and no recent commits, this reinforces the lack of active project maintenance.
The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these values provide no additional sign of an active user or contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.0 | — | — |
easy-system/es-mvc Version * | — | — |
easy-system/es-http Version * | — | — |
easy-system/es-events Version * | — | — |
easy-system/es-system Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.