longwave/laminas-diactoros
The package is clearly licensed, documented, and tied to a matching source repository with release notes for this version. Maintenance has been quiet since September 2024, and all three workflow action references are unpinned.
64%
Total Score
50
100
88
83
Health Score Breakdown
The registry namespace and repository owner are the same user account rather than an organization, so there is no observed organizational backing to compensate for the thin maintenance activity.
The package has only 3 releases and none in the last 12 months; its latest release was in September 2024, indicating a slow and now inactive release cadence.
There were no commits and no active maintainers in the last 3 months, reinforcing the concern that maintenance has stopped rather than merely slowed.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for a package handling HTTP messages.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.