Healthy and reasonable to adopt, though it is a very young project with all recent commits from one contributor. Organization backing, active releases, tests in the repository, and a clear README offset the limited security and contributor history.
78%
Total Score
80
50
83
90
Six runtime dependencies, including the framework, Flysystem, and Amp components, create meaningful dependency surface but are consistent with the package's storage-adapter role.
Only one registry account has publish access, which limits publishing redundancy; the organization-owned repository provides some compensating project backing.
The package is only 23 days old, but it has already made eight releases, with releases arriving about every two to three days; this shows active development but limited long-term history.
One contributor made all nine recent commits, creating a clear continuity risk. Organization ownership partly compensates because maintenance can potentially be handed off internally.
The repository has zero stars, forks, and watchers. This is weak supporting evidence and is not decisive for a very young, organization-backed package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
amphp/file Version ^3.2.0 | — | — |
league/flysystem Version ^3.35.2 | — | — |
amphp/byte-stream Version ^2.1.2 | — | — |
kinetis/framework Version ^1.11.2 | — | — |
league/mime-type-detection Version ^1.17.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.