The package includes tests, a README, and an MIT declaration, with a correctly matching source repository. Its small footprint and lack of security policy provide limited reassurance, while the dependency set adds some maintenance surface.
42%
Total Score
25
50
75
83
The package has only three releases and none in the last 12 months; its latest release was in December 2020, about five years and nine months ago. This is strong evidence of abandonment risk, despite the package not being deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided maintenance signal compensates for this inactivity.
The package declares five runtime dependencies, including HTTP and cache components, creating some ongoing compatibility surface for a small helper. The signal shows no inherently excessive dependency profile.
The package and repository are owned by the same individual account rather than an organization. This is consistent with a small personal project and provides limited backing if the maintainer stops work.
The repository has zero stars and forks and only one watcher, offering little community evidence to offset the single-maintainer, inactive-project picture.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 | — | — |
symfony/cache Version ^5.2 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
kevinrob/guzzle-cache-middleware Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.