The artifact is small and clean, with a matching MIT license and no install-time scripts. Documentation is minimal, so integration guidance is limited.
62%
Total Score
50
100
79
75
A README is present and this release has GitHub release metadata, but the README contains only 23 characters. The absence of packaged tests and a changelog is normal packaging practice, while the repository also has no tests or changelog.
The repository is owned by an individual user rather than an organization, so there is no organizational backing shown to offset the concentrated contributor base.
The package is only 3 days old and has a single release, so maintenance maturity and long-term stability are not yet demonstrated.
All recent commits came from one contributor, so maintenance depends entirely on a single person; the repository owner is an individual rather than an organization.
There was one commit in the last 3 months from one active maintainer. That confirms recent activity but provides little evidence of sustained maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.