It has solid documentation, tests, licensing, release notes, and a matching organization-backed repository. Low adoption, no security policy, and unpinned workflow actions add maintenance and build-integrity concerns.
60%
Total Score
50
50
83
67
The repository recorded zero commits and zero active maintainers in the last 3 months, a significant sign that maintenance may have slowed or stopped.
The package declares 23 runtime dependencies, including a broad asynchronous web framework stack. This increases dependency maintenance surface compared with a small library.
The package has 9 releases since May 2023, but none in the last 12 months; the latest release was over a year ago. This weakens evidence of ongoing maintenance.
There are 2 open issues but no new or closed issues or pull requests in the last month, indicating little recent public activity.
The repository has only 2 stars and 2 forks, so there is limited independent adoption evidence. Popularity is supporting evidence rather than a standalone health verdict.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
amphp/log Version ^v2.0 | — | — |
psr/clock Version ^1.0 | — | — |
amphp/http Version ^v2.1 | — | — |
league/uri Version ^7 | — | — |
amphp/cache Version ^v2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.