58%
Total Score
25
50
83
75
There were zero commits and zero active maintainers in the last 3 months, consistent with the long release pause. This is the strongest evidence of currently stalled maintenance.
Six runtime dependencies, including asynchronous networking and Symfony components, create meaningful maintenance surface compared with a minimal client. The available signal does not show that these dependencies are stale or unsafe, so this is only a modest concern.
Only one registry account has publishing access. Because the repository is user-owned rather than organization-backed, this leaves limited visible publishing redundancy and increases continuity risk.
The package has 26 releases over about 2 years, but none in the last 12 months; the latest release was about 17 months ago. Earlier regular releases provide some maturity, but the recent pause lowers maintenance confidence.
The repository has 4 stars, 0 forks, and 1 watcher. Low popularity is supporting context rather than a verdict, but it provides little external evidence of broad use or community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/dom-crawler Version ^7.2 | — | — |
amphp/websocket-client Version ^2.0 | — | — |
league/html-to-markdown Version ^5.1 | — | — |
symfony/event-dispatcher Version ^7.2 | — | — |
amphp/http-client-cookies Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.