The package includes documentation, tests, a matching license, and a small runtime dependency set. Its organization-backed repository still matches the package, but the long pause in releases and commits makes this a poor choice for a new dependency.
43%
Total Score
50
71
75
The latest release was in October 2019, with no releases in the last 12 months; the package has been without a release for nearly seven years. That is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last three months, confirming that maintenance has effectively stopped.
The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is not decisive, but these figures provide little external evidence of maturity or support.
The repository has no security policy and no security-scanning tools. This is a transparency and maintenance gap, though it is less severe than the demonstrated inactivity.
The assessed version is v0.9.2 and is not a stable major release, leaving the API less mature even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
litphp/air Version ^0.9.2 | — | — |
litphp/voltage Version ^0.9 | — | — |
symfony/event-dispatcher Version >=4.0.0 <4.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.