The package has a substantial README, tests, and a matching source repository. Install-time scripts, an unpinned workflow action, and no security policy add smaller maintenance and hygiene concerns.
38%
Total Score
25
80
50
The latest release was published on April 22, 2022, with no releases in the last 12 months; the package has had no registry updates for about four years. Its 249-release history shows prior activity but does not offset the prolonged halt.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release inactivity. The repository is not marked archived, but that does not demonstrate current maintenance.
The package defines post-install and post-update scripts, which increase installation-time behavior and maintenance exposure compared with a package without lifecycle hooks.
There were no new issues, closed issues, pull requests, or merged pull requests in the last month. With no recent commits or releases, this provides no evidence of ongoing project activity.
The linked repository has no security policy. For a protocol client handling authentication and network communication, this is a transparency and vulnerability-reporting gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1 | — | — |
amphp/amp Version ^2 | — | — |
amphp/dns Version ^1 | — | — |
amphp/log Version ^1.1 | — | — |
danog/ipc Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.