The project has clear documentation, tests in the repository, release notes, and a recent stable release. Maintenance is quiet between releases, with one registry maintainer, no security scanning, and unpinned workflow actions.
68%
Total Score
50
100
88
75
Only one account has registry publish access. The matching personal repository and recent release show ownership continuity, but the single-person publishing base increases continuity risk.
The registry namespace and repository owner match, and the owner is an individual, so the package has direct ownership alignment but no organizational backing shown by this signal.
The package is mature at about nine years old but has only six releases, one in the last 12 months, and a median interval of about 411 days, indicating a slow maintenance cadence.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the current maintenance signal is weak.
There is only one open issue and no issue or pull-request activity in the last month; this is consistent with a small, quiet project but offers little evidence of ongoing support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
guzzlehttp/ringphp Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.