This is a healthy, actively maintained release with a strong publication history: it has existed for over 5 years, has 162 releases including 33 in the last 12 months, and the latest release is stable and not deprecated. The package is licensed, includes tests and a complete source tree, has no install-time lifecycle scripts, and is backed by a non-archived organization-owned repository that has received 16 commits in the last 3 months. The main risks are a single active contributor accounting for all recent commits, very low repository adoption, and the absence of a security policy or security-scanning tooling; these warrant monitoring but do not outweigh the strong release and maintenance evidence.
82%
Total Score
70
100
89
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.4 | — | — |
getpop/component-model Version ^19.2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.