Usable with caveats: this is a small, clearly licensed package with matching source, tests, a stable release, and no deprecation or archive status. Maintenance has effectively stopped since early 2024, with no recent commits or releases, and the repository lacks a security policy.
64%
Total Score
50
100
83
90
There were zero commits and zero active maintainers in the last three months, a strong indication that ongoing maintenance is currently absent.
Only one registry publisher is listed, creating some bus-factor concern; this is partly consistent with the matching user-owned repository but does not show active backup capacity.
The package has nine releases since July 2016, but it has had no release in about 2 years and 8 months, indicating slowed maintenance.
There are three open issues and three open pull requests, with none created or closed in the last month; this suggests unresolved maintenance demand.
Composer is used for the build, but no security-scanning tool is configured; this is a transparency gap for a library, though it is not by itself evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.