Authentication for EchoFusion: session and token guards, pluggable user providers and PSR-15 middleware. Depends only on echo-fusion/contracts and PSR interfaces.
68%
Total Score
caution
Only three releases, all within about 79 minutes, leave maintenance maturity unproven.
The package has only 3 releases and is 0 days old, with all releases occurring within about 79 minutes. This shows active initial publishing but not an established maintenance record.
The repository reports 0 commits and 0 active maintainers in the last 3 months, so sustained maintenance capacity is not yet demonstrated. Four merged pull requests in the last month provide limited compensating activity, while the project itself is newly published.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of unsafe code.
The repository has no security policy. For an authentication library, that reduces transparency around vulnerability reporting and response.
The single workflow was fully analyzed, has read-only permissions, and has no untrusted checkout or injection findings. However, both action references are unpinned, leaving their resolved code able to change over time.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
echo-fusion/contracts Version ^1.8 || ^2.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.