The package has had no release or commit activity for about two years, and all six workflow actions are unpinned. It remains small and well-scaffolded, with tests, documentation, a matching repository, and no deprecation or archive status.
62%
Total Score
75
100
78
83
The package is about 803 days old but has only four releases and none in the last 12 months, indicating a long period without published maintenance. Its small scope may explain infrequent releases, but the inactivity still raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the roughly two-year gap since the latest release. No provided activity signal compensates for this maintenance gap.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a small, quiet project, but provides no evidence of ongoing community maintenance.
The repository has no stars or forks and one watcher, showing little public adoption. Popularity is only supporting evidence, so this modestly reduces confidence in maturity but does not determine the verdict.
The repository uses Composer build tooling, but no security scanning tools were detected. This is a modest hygiene gap, not a severe concern, because the workflows otherwise passed the audit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
amphp/byte-stream Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.