Tests, release notes, MIT licensing, and Psalm checks provide useful safeguards. The small organization-backed project has little adoption evidence, and its workflow references are all unpinned.
60%
Total Score
67
50
83
67
The package declares 23 runtime dependencies for a broad asynchronous framework, creating meaningful dependency surface area but not an abnormal concern on its own.
The package has 9 releases since September 2022, but no releases in the last 12 months and its latest release was about 14 months ago, indicating slowed maintenance.
No commits and no active maintainers were recorded in the last three months, which is a clear sign that maintenance has currently stalled.
There are 2 open issues and no issue or pull-request activity in the last month, consistent with a small and currently quiet project.
The repository has only 2 stars, 2 forks, and 1 watcher, providing little independent evidence of adoption or community support.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
amphp/log Version ^v2.0 | — | — |
psr/clock Version ^1.0 | — | — |
amphp/http Version ^v2.1 | — | — |
league/uri Version ^7 | — | — |
amphp/cache Version ^v2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.