38%
Total Score
unhealthy
Risky: no registry release in nearly eight years, no recent commits, and no license.
The latest release was published nearly eight years ago, with no releases in the last 12 months. This is strong evidence of an aging, potentially abandoned dependency despite its earlier regular release cadence.
There were no commits or active maintainers in the last three months, and the repository was last pushed over four years ago. This materially raises abandonment and compatibility risk.
No license is declared, and neither the package artifact nor the repository contains a license file. This creates a material legal and transparency concern for adoption.
There has been no issue or pull-request activity in the last month, with two issues still open. This supports the picture of limited current maintenance, though the small issue count limits the severity.
The repository has modest popularity with seven stars and three forks. This is limited supporting evidence and does not materially offset the stale maintenance signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
beberlei/assert Version ^2.6 | — | — |
php-http/httplug Version ^1.0 | — | — |
php-http/message Version ^1.3 | — | — |
eleven-labs/api-validator Version ^0.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.