It has tests, a changelog, and a matching repository, but the release is proprietary and its workflow uses an unpinned action. The available maintenance evidence does not support a dependable dependency.
15%
Total Score
25
100
42
75
Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning against taking a new dependency on it.
The package has 37 releases and a historically frequent median interval of about 10 days, but it has had no releases in the last four years. The long period of inactivity materially raises abandonment risk.
There were zero commits and zero active maintainers in the last three months. This corroborates the archived and abandoned state rather than showing merely slow development.
The linked repository is archived and was last pushed in April 2022, so upstream maintenance and issue response should not be expected.
The manifest declares a proprietary license, so the release is licensed, but its reuse and redistribution terms may be unsuitable for an open-source dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version * | — | — |
mathsgod/php-psr7 Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.