Its MIT license, repository tests, and release notes improve transparency. The package lacks a security policy, and the available maintenance evidence does not support relying on this release for new work.
12%
Total Score
50
57
83
Packagist marks the entire package as abandoned and recommends league/uri, making this release unsuitable for a new dependency despite the absence of a specific deprecation message.
The package has had no release in nearly eight years: its latest release was November 26, 2018, and it had zero releases in the last 12 months.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with an abandoned project rather than an actively maintained dependency.
The linked repository is archived, with its last push on March 27, 2021; archived source is a strong sign that fixes and maintenance will not continue.
There were no new or closed issues or pull requests in the last month, while one issue and one pull request remain open; this offers no evidence of current maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.0 | — | — |
league/uri-parser Version ^1.4.0 | — | — |
league/uri-interfaces Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.