The package is licensed, documented, and backed by a substantial test suite. Its small user base and lack of recent maintenance make long-term support uncertain.
57%
Total Score
50
100
83
75
The registry lists one publishing maintainer. Because the repository is owned by an individual rather than an organization, this represents a thin maintainer base and raises continuity risk.
The registry namespace and repository owner match, but both identify an individual account. This supports package identity while providing limited organizational backing.
Only five releases were published, all concentrated around March 2025, with no releases in the last 12 months despite the package being about 18 months old. This is a meaningful maintenance concern.
There were no commits and no active maintainers in the last three months. Combined with the older last push, this is the strongest evidence that ongoing maintenance may have stopped.
The repository has five stars, zero forks, and one watcher. Popularity is only supporting evidence, but these low figures provide little evidence of a broad support community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0|^2.0|^3.0 | — | — |
hyperf/guzzle Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.