Contracts regarding messages.
40%
Total Score
unhealthy
A single release from 2017 has had no commits since, and the package has no declared or detected license.
The package has only one release, published over nine years ago, with no releases in the last 12 months. This is strong evidence of an abandoned or unfinished dependency.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release history showing no development since 2017.
Neither the registry metadata, package artifact, nor linked repository contains a recognized license. That creates a real legal and adoption concern.
The library has no README, tests, or changelog in the package or repository. Missing tests and changelog are acceptable packaging gaps, but the absent README reduces consumer transparency for a library.
Composer build tooling is present, which supports reproducible package structure, but no security scanning tooling is configured. This is a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.