The repository includes tests, a large README, a license, security guidance, and dependency scanning. Its dependency set is substantial, while the tiny repository audience and absent recent activity reduce confidence in ongoing maintenance.
38%
Total Score
50
50
78
75
The package has had no release in 4 years 9 months, despite 300 releases concentrated in its first few days. That long silence is strong evidence of abandonment risk for this release.
The release declares 34 runtime dependencies, including several infrastructure and extension requirements. This increases maintenance and compatibility surface area, though the repository's Composer tooling provides some structure.
The package runs post-install and post-update Composer scripts. These scripts add installation-time behavior that consumers must trust and maintain, although their presence alone is not evidence of abandonment.
The repository is owned by an individual account, so the one registry maintainer is not explained by organizational backing. This provides limited continuity assurance, but observed activity remains more important.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. The repository was pushed in December 2024, but current activity is still absent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1 | — | — |
amphp/amp Version ^2 | — | — |
amphp/dns Version ^1 | — | — |
amphp/log Version ^1.1 | — | — |
danog/ipc Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.