This is a newly published, stable v1.0.0 package with a linked, non-archived organization-owned repository and substantial source structure, tests, CI, and release automation. Its main limitation is that it has existed for only 0 days with a single release and no observed commits or active maintainers over the last 3 months, so maintenance maturity and long-term stability are unproven; the absence of a security policy is an additional transparency gap. It is reasonable to evaluate or adopt with normal dependency controls, but it does not yet have the track record of a mature dependency.
68%
Total Score
75
100
88
88
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
php-http/discovery Version ^1.19 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.