Documentation, tests, licensing, and a clean package layout support adoption. Security coverage is limited, and future maintenance depends heavily on one active contributor.
67%
Total Score
63
100
83
83
Only one registry account has publish access. This is a narrow publishing base, and the available project-backing evidence identifies a user-owned repository rather than an organization that could clearly provide handoff capacity.
The repository owner is a user account rather than an organization, so the available evidence does not show organizational maintenance capacity.
The package is only 45 days old and has 15 releases, with a median interval of 0 days; this shows active development but limited maturity and a very rapid release pattern.
All five recent commits came from one contributor, leaving no demonstrated second maintainer to absorb ownership or review work.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external adoption signal for this very new package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
kode/context Version ^3.1 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.