It has a valid BSD-3-Clause license, a usable README, and a changelog, with no install-time scripts. The absence of a security policy and automated workflow coverage leaves less transparency around ongoing maintenance.
42%
Total Score
50
100
81
75
The package has only two releases, with the latest published about two years ago and none in the last 12 months. That limited, inactive release history raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.
The repository name matches the package, but its README does not mention the package name. That weakens confidence that the linked repository clearly documents and represents this package.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these counters provide no supporting evidence alongside the inactive project.
The linked repository has no security policy, reducing transparency about how vulnerability reports would be handled.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ~0.9 | — | — |
laminas/laminas-zendframework-bridge Version 0.3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.