PSR15 Query String Parser
70%
Total Score
caution
Usable with caveats: recent repository work helps, but releases are infrequent and maintenance is concentrated in one person.
The repository and registry namespace are owned by the same individual account, matching the single-maintainer activity pattern. There is no organization backing shown to compensate for that concentration.
The package has five releases since December 2019, a median interval of about 377 days, and no releases in the last 12 months. This indicates a slow release cadence, although the package is not deprecated and repository activity remains recent.
One contributor made all four commits in the last three months, giving the project a bus factor of one. This creates a real continuity risk for a package maintained by an individual.
The repository recorded four commits in the last three months, but all came from one active maintainer. Recent work is reassuring, while the narrow activity base limits resilience.
Composer is used for the build, but no security scanning tools were detected. The missing scanning reduces assurance modestly, without indicating abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.5 || ^2.0 | — | — |
psr/http-message Version ^1.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.