The clear README, tests, and stable MIT-licensed package make integration easier. Its single-maintainer project has had no release in the last 12 months and no commits in the last 3 months, so future support is uncertain.
58%
Total Score
50
100
83
83
Only one registry publishing account is listed. That is not inherently unhealthy for a user-owned project, but it leaves limited visible publishing capacity when combined with inactive maintenance.
The package is 420 days old with four releases, but none in the last 12 months; releases were concentrated within roughly one day, indicating a short initial burst followed by inactivity.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the release-history evidence that current maintenance has stopped.
The repository has zero stars and watchers and only two forks. This is supporting evidence of limited adoption, not a decisive health problem by itself.
Composer build tooling is present, but no security-scanning tool was detected; that weakens repository hygiene without proving the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.