The package includes a README, tests, MIT licensing, and a small dependency set. Its repository remains unarchived and matches the package, but maintenance and security coverage are limited.
58%
Total Score
50
100
81
83
The repository had zero commits and zero active maintainers in the last three months. Combined with the 2022 release date, this is strong evidence of inactive maintenance.
The package has 11 releases since November 2016, but no releases in the last 12 months and its latest release was in March 2022. This indicates prolonged release inactivity.
Three issues remain open, with no new or closed issues and no pull-request activity in the last month. This shows unresolved maintenance demand without evidence of active triage.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe by itself.
The linked repository is not archived, although its last push was in May 2022. The unarchived state is reassuring, but the old last-push date is consistent with the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
aura/session Version ^2.1 | — | — |
psr/http-message Version ^1.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.