The package includes tests, a clear README, and a matching organization-backed repository. Maintenance has stopped since April 2023, with no recent releases or commits; workflow references are also unpinned and no security policy is present.
62%
Total Score
63
100
78
83
There were zero commits and zero active maintainers in the last three months, consistent with maintenance having effectively stopped since the last push in April 2023.
The manifest declares a proprietary license, so the release has an explicit licensing status. No license file was detected, which limits transparency but is not an absence of licensing.
The package has 32 releases, but none in the last 12 months and the latest release was in January 2023. This is meaningful abandonment risk despite the historically active release record.
There has been no issue or pull request activity in the last month, while one issue and three pull requests remain open. Combined with stale commits, this suggests limited current project attention.
The repository has zero stars and forks and only two watchers, indicating limited external adoption. Popularity is supporting evidence, so this modestly lowers confidence rather than determining the verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
psr/cache Version ^1.0|^2.0|^3.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
germania-kg/response-decoder Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.