The package includes extensive documentation, tests, a changelog, and a release for this version. No commits were recorded in the last three months, and the repository has no security policy, so ongoing maintenance and disclosure practices are less clear.
72%
Total Score
50
100
94
75
One registry publisher account limits publishing redundancy, but the linked repository is owned by the same individual and recent releases provide evidence of active ownership.
The package and repository are both owned by the same individual rather than an organization, so there is no organizational backing to compensate for the small maintainer base.
No commits or active maintainers were recorded in the last three months. The recent release partly offsets this because it was published near the repository's last push, but the quiet period still raises maintenance concern.
There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month; this offers little evidence of ongoing community maintenance.
The repository uses Composer, appropriate for this PHP package, but no security scanning tools were detected, leaving automated security hygiene unconfirmed.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^1.1 | — | — |
php-http/discovery Version ^1.19 | — | — |
graham-campbell/guzzle-factory Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.