This is a mature, stable PHP package with a release history dating back to 2015, a current stable 4.0.0 release, clear documentation, tests, changelog, an explicit MIT license, and a repository that matches and documents the package. The main concerns are limited recent development activity, a single registry maintainer, low repository adoption, absent security-policy documentation, and a release workflow with top-level write permissions. The package is usable as a dependency, but its small maintainer and contributor footprint make long-term continuity worth monitoring.
74%
Total Score
50
100
83
80
Only one account has registry publish access. This does not establish who actively maintains the project, but it does indicate limited publishing redundancy and raises continuity risk.
The repository is owned by an individual user rather than an organization, so there is no observed organizational backing to compensate for the single registry maintainer and small contributor footprint.
The package has existed for about 10 years with 9 releases, but only 1 release in the last 12 months and a median interval of about 520 days indicate a slow release cadence. The release published today is compensating evidence that the project is not entirely abandoned.
There were 0 commits and 0 active maintainers during the last 3 months, indicating a collapsed recent development footprint. The repository push and release today partially offset, but do not erase, this concern.
There are no open issues or pull requests, and one pull request was merged in the last month; this is consistent with a small, quiet project but provides only limited evidence of ongoing community activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.7 | — | — |
psr/container Version ^1.1 || ^2.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.