Healthy and actively maintained, with strong release activity and recent repository work. Adoption still carries some transparency and continuity risk because the repository does not clearly identify this package and all recent commits come from one contributor.
78%
Total Score
88
50
88
88
The package declares 22 runtime dependencies, including several related project packages and infrastructure libraries, which increases upgrade and transitive-maintenance surface. The profile is not by itself severe enough to make the package unhealthy.
All 24 recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown to compensate for the concentration.
The repository name does not match the package name, and no README package mention was available. This leaves uncertainty about whether the linked repository directly backs this release; organization ownership and the substantial matching source tree provide only partial reassurance.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but active releases and security scanning provide partial context.
Version 0.10.4 is not a stable-major release, so compatibility guarantees are weaker than for a 1.0-or-later package. It is not a prerelease, and only 20% of recent releases were prereleases, limiting the concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.8.0 | — | — |
lesname/http Version ^0.9.6 | — | — |
lesname/cache Version ^0.4.3 | — | — |
lesname/queue Version ^0.9.3 | — | — |
lesname/token Version ^0.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.