The package has a clear README, tests, release notes, stable versioning, and an organization-backed repository. Its low popularity and missing security policy reduce transparency, so pin this version and verify future maintenance before upgrading.
62%
Total Score
75
94
75
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance concern despite the release published on March 13, 2026.
The repository has 1 star, 0 forks, and 0 watchers, providing little independent evidence of adoption or external review. Low popularity is supporting evidence rather than a health verdict by itself.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled for a library with 14 runtime dependencies.
All 13 analyzed GitHub Actions references are unpinned, leaving workflow dependencies exposed to changing upstream code. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, which limits this to a hygiene concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
iquety/http Version ^2.0 | — | — |
nyholm/psr7 Version ^1.8 | — | — |
iquety/pubsub Version dev-main | — | — |
iquety/shield Version dev-main | — | — |
psr/container Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.