A simple, type-safe, zero dependency port of the javascript fetch WebApi for PHP
57%
Total Score
50
88
50
The package has had three releases since November 2020, but none in the last 12 months; the latest release was in April 2021, over five years ago. This is a meaningful maintenance concern despite a previously regular release interval.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release since April 2021. This raises abandonment risk.
Version 0.3.0 is not a stable major release, so the public API may still change before 1.0.0. This is partly offset by the package having a concrete release and release notes.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all nine action references are unpinned. That leaves avoidable build-integrity exposure and is a hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
castor/io Version ^0.2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.