The package has thorough documentation, tests, a matching repository, and frequent recent commits. Maintenance is concentrated in one contributor, while the repository lacks security scanning and a security policy; pin this version and monitor future releases.
64%
Total Score
63
50
83
75
The package has 10 runtime dependencies, including several PHP extensions and Workerman, creating meaningful environmental and dependency surface requirements for adopters.
Only one registry account, KodePHP Team, has publishing access. That is limited publishing redundancy, although repository activity provides additional evidence of ongoing work.
The repository is owned by a User account rather than an organization, so there is no provided evidence of institutional handoff capacity to offset the concentrated contributor base.
There were 67 releases in 160 days, with a median interval of about 1 hour, showing active publishing but an unusually rapid cadence that may indicate release churn.
One contributor made 100% of the 71 recent commits. This concentration creates a real continuity risk because the repository owner is an individual account rather than an organization.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2.0|^3.0 | — | — |
kode/queue Version ^2.2 | — | — |
kode/fibers Version ^4.5 | — | — |
kode/context Version ^3.1 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.