The package includes a license, substantial README, changelog, repository tests, and no install scripts. Its security policy and active, non-archived source are positives, but longer-term maintenance is unproven.
62%
Total Score
50
81
100
This is the first and only release, published less than a day ago, so there is no release track record yet. That is consistent with a new project rather than evidence of abandonment, but maturity remains unproven.
No commits or active maintainers were observed in the last three months. Because the repository and release are brand new, this is primarily an unproven-maintenance concern rather than evidence of a collapsed project.
The repository uses Composer, but no security scanning tools were detected. That is a modest transparency and hygiene gap, not a standalone reason to reject the package.
The release is v0.3.0 rather than a stable major version, which signals an early-stage API. It is not marked as a prerelease, so this is a moderate maturity concern rather than a severe warning.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^2.13 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.