PSR-7 and PSR-15 OpenAPI Validation Middleware
68%
Total Score
caution
Usable with caveats: recent maintenance is thin and concentrated in one contributor.
The release declares 10 runtime dependencies, creating a relatively broad dependency surface for a middleware package. No provided evidence shows that these dependencies are unsafe or unmaintained, so this is a modest complexity concern rather than a severe risk.
The registry namespace and repository are owned by the same individual account. This confirms alignment but provides no organizational backing to offset the concentrated maintainer base.
The package has existed since September 2018 with 36 releases and a latest release on August 28, 2026. Only one release in the last 12 months indicates a slower current cadence, but the recent release shows the project is not abandoned.
All one recent commit came from a single contributor, so maintenance knowledge is concentrated and continuity depends heavily on that person.
The repository recorded one commit in the last three months, indicating limited recent development activity even though the package has a recent release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ckr/arraymerger Version ^2.0|^3.0 | — | — |
opis/json-schema Version ^2.3 | — | — |
psr/http-message Version ^1.0 | — | — |
respect/validation Version ^1.1 | — | — |
tuupola/http-factory Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.