Its long history, clear licensing, repository tests, and release notes support dependable maintenance. The last three months show no commits or active maintainers, so future response speed is less certain.
78%
Total Score
50
100
93
75
The package has existed for over six years with 29 releases, but only one release in the last 12 months indicates a slower current cadence.
There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance and may slow fixes.
All three workflows were analyzed with no audit findings or untrusted-trigger sinks. Two of three action references are unpinned, a minor reproducibility concern rather than a severe workflow risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 || ^2.0 | — | — |
dflydev/fig-cookies Version ^3.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.