Its README, tests, and changelog make integration straightforward, and the release is stable and not deprecated. However, it has had no release or commit activity since December 2021, with no active maintainers in the latest three months.
58%
Total Score
25
78
75
This is a single-release package, with no releases in the last 12 months and the latest release published in December 2021. That long period without updates raises abandonment risk for a dependency.
There were zero commits and zero active maintainers in the latest three months. Combined with the old one-release history, this is the strongest maintenance concern.
The repository is owned by an individual account rather than an organization, so there is no provided organizational backing to compensate for the small maintainer base and inactive commit history.
The repository has zero stars, one fork, and one watcher. Popularity is only supporting evidence, but these very low figures provide little evidence of broad community validation.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
react/stream Version ^1.0 || ^0.7.6 | — | — |
react/promise Version ^2.3 || ^1.2.1 | — | — |
monolog/monolog Version ^2 || ^1.23 | — | — |
react/event-loop Version ^1.0 || ^0.5 || ^0.4 || ^0.3.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.