Framework-agnostic IndexNow client: key handling, a host policy that keeps non-production hosts out, spec-conform submissions and a PSR-18 transport.
70%
Total Score
caution
A brand-new package with 16 same-day releases and one active contributor remains promising but unproven.
The repository is owned by an individual rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.
The package is 0 days old and has published 16 releases within the same day, so its maintenance record and release discipline are not yet established.
All four recent commits came from one contributor, leaving maintenance highly dependent on a single person; the individual-owned repository offers no organizational handoff signal.
Four commits in the last three months show some activity, but the short observation window and single active maintainer provide limited evidence of sustained maintenance.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0.3 | — | — |
psr/http-factory Version ^1.1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.