This is a credible but very new package: it has a stable v1.0.0 release, an MIT license with a license file, an organization-owned repository that matches the package and documents it, repository tests, and no install-time lifecycle scripts or deprecation notice. However, the package was released only minutes ago with no prior release history or observed commit activity, and the repository lacks security scanning, a security policy, and CI workflows; these are meaningful maturity and transparency gaps rather than evidence of maliciousness. It is reasonable to evaluate as an early-stage dependency, but adoption carries more maintenance and continuity risk than an established package.
68%
Total Score
75
100
88
88
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.8.2 | — | — |
psr/http-client Version ^1.0.3 | — | — |
psr/http-message Version ^2.0 | — | — |
kinetis/framework Version ^1.5.2 | — | — |
kinetis/revolt-http-client Version ^1.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.