It has a clear MIT license, thorough usage documentation, release notes, and repository tests. Unpinned workflow images and no security policy add modest supply-chain hygiene concerns.
60%
Total Score
83
100
83
75
The package has 9 releases since September 2023, but none in the last 12 months and its latest release was in November 2024, indicating a meaningful maintenance slowdown.
There were no commits and no active maintainers in the last 3 months, consistent with the repository having stopped changing after November 2024.
The repository has 1 star and no forks, providing little community evidence to compensate for its inactive maintenance, though popularity alone is not decisive.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.
The repository has no security policy, so consumers have no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
php-http/discovery Version ^1.14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.