Tests, documentation, release notes, and a declared BSD-3-Clause license provide useful project transparency. The source is not archived and has no install-time scripts, but its small dependency footprint does not offset the lack of recent activity.
58%
Total Score
75
100
83
83
The package has only two releases, both published within about two days in April 2024, and none in the following 12 months. This suggests a narrow maintenance history and increases abandonment concern.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. That materially lowers confidence in ongoing maintenance.
The repository has 0 stars, 1 fork, and 0 watchers. Popularity is only supporting evidence, but these low counts provide little independent evidence of adoption or community support.
No security policy is present in the linked repository, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, though it is less serious than the maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yiisoft/yii2 Version ^2.0.47 | — | — |
webonyx/graphql-php Version ^14.11 | — | — |
ecodev/graphql-upload Version ^6.1 | — | — |
laminas/laminas-diactoros Version ^3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.