The README and license make the package understandable and legally usable. Its maintenance record is effectively dormant, with no releases or commits since November 2021 and no tests or security policy, so future compatibility and support are uncertain.
38%
Total Score
33
63
83
The package has only one release, published in November 2021, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.
There were zero commits and zero active maintainers in the last three months, consistent with the package having received no updates since November 2021.
A substantial README is present. Missing tests and a changelog in the published artifact are normal packaging practice, while the repository also has no tests or changelog, limiting maintenance transparency slightly.
The registry namespace and repository owner match a single user account. This is consistent ownership, but it does not provide organizational backing or a broader maintenance base.
There was no issue or pull request activity in the last month, and no pull requests were open. This provides no evidence of active community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sentry/sdk Version ^3.1 | — | — |
nyholm/psr7 Version ^1.0 | — | — |
yiisoft/yii2 Version ~2.0.13 | — | — |
sentry/sentry Version ^3.3 | — | — |
symfony/psr-http-message-bridge Version ^1.0 | ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.