42%
Total Score
unhealthy
Risky: no releases or repository activity for about 22 months signals likely abandonment.
The package has had no release in about 22 months and none in the last 12 months, despite only five releases overall; this is a substantial maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the extended release pause rather than showing ongoing maintenance between releases.
One registry publishing account is consistent with a small user-owned project, but it also indicates limited publishing resilience when no active repository maintainers are observed.
The repository is owned by the same individual user as the registry namespace, confirming a direct link but providing no organization-level backing to offset the thin maintenance base.
The repository has zero stars and forks and only one watcher, providing little evidence of a user or contributor community to support the package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/http Version ^1.10 | — | — |
react/stream Version ^1.4 | — | — |
firebase/php-jwt Version ^6.10 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.