Usable with caveats: it has a clear MIT license, a substantial README, a matching repository reference, and recent activity. However, it is only 56 days old, has just two releases, and all four recent commits came from one contributor without a security policy.
62%
Total Score
50
100
81
83
The package and repository are owned by the same individual account, so the repository clearly has direct personal backing, but there is no organization-level maintenance redundancy.
The package is very young at 56 days old and has only two releases, so its compatibility and maintenance history are still limited.
All four recent commits came from one contributor, giving the project a high single-maintainer dependency and increasing continuity risk.
The repository recorded four commits in the last three months, showing recent activity, but the small volume limits evidence of sustained maintenance.
The repository has only 3 stars, 0 forks, and 0 watchers. Low popularity is supporting evidence rather than a verdict, but it provides little external validation for this young package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
amphp/amp Version ^3.1 | — | — |
amphp/socket Version ^2.3 | — | — |
amphp/byte-stream Version ^2.1 | — | — |
amphp/http-client Version ^5.3 | — | — |
guzzlehttp/guzzle Version ^7.10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.