The package is small and lightly used, with no commits in the last three months and no security policy. MIT licensing, repository-backed ownership, tests, and release notes provide useful transparency, but the alpha release warrants pinning and careful upgrade planning.
67%
Total Score
75
50
81
83
Seven runtime dependencies, including the framework, HTTP, PSR-7, and RoadRunner components, create a meaningful compatibility surface for an alpha adapter but are coherent with its stated role.
The repository recorded zero commits and zero active maintainers in the last three months. The release-date push is recent, but the short-term inactivity still weakens evidence of sustained maintenance.
There are no open issues or pull requests and no activity in the last month. This is quiet rather than clearly problematic, but it provides little evidence of an active user or contributor community.
The repository has one star, zero forks, and one watcher, showing a very small adoption footprint; popularity is supporting evidence, but this does not by itself make the package unsafe to depend on.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.8 | — | — |
micro/kernel-app Version ^1.6 | — | — |
spiral/roadrunner Version ^2.0 | — | — |
micro/plugin-http-core Version ^1.6 | — | — |
micro/plugin-event-emitter Version ^1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.