The repository includes tests, a changelog, a clear README, and matching MIT licensing. It is a same-day v0.1.0 release with no recorded three-month commit activity, and all four workflow actions are unpinned, so maintenance maturity and build reproducibility remain limited.
62%
Total Score
75
79
67
This is the package's first release and it is only 0 days old, so there is no release track record to establish maintenance or stability.
The repository records 0 commits and 0 active maintainers over the last 3 months, leaving maintenance capacity unproven; the same-day package age partly explains this rather than proving abandonment.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency gap for a package that handles HTTP data and redaction.
The repository has no security policy, so users lack a documented channel and process for reporting vulnerabilities.
Version v0.1.0 is not a stable major release, which signals an early API and maintenance stage despite not being marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 || ^2.0 || ^3.0 | — | — |
illuminate/log Version ^11.0 || ^12.0 | — | — |
illuminate/http Version ^11.0 || ^12.0 | — | — |
league/flysystem Version ^3.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.