The package includes a clear README, tests, and a repository that still matches its documentation. Its small project footprint offers little evidence of ongoing support or licensing clarity for a new dependency.
48%
Total Score
50
80
50
No license declaration, license file, or detected repository license was found, leaving legal reuse unclear for this dependency.
The last release was on August 24, 2022, and there were no releases in the following 12 months of the assessed history, which is a meaningful maintenance concern for a client library.
The repository had zero commits and zero active maintainers in the three months before collection, providing no evidence of current maintenance.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities, although this is secondary to the lack of recent development.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
psr/cache Version ^1.0|^2.0|^3.0 | — | — |
nyholm/psr7 Version ^1.3 | — | — |
germania-kg/token Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^6.3|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.