48%
Total Score
unhealthy
Risky: no commits or releases for over 20 months, alongside missing licensing and weak workflow pinning.
The package has 17 releases, but none in the last 12 months; its latest release was over 20 months ago. This strongly increases abandonment risk despite a previously active release history.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. That is strong evidence that maintenance has stopped or substantially slowed.
No license is declared, and no license file was detected in either the package or repository. This leaves the legal terms for adopting the code unclear.
Both workflows were fully analyzed with no dangerous triggers or audit findings, but all five referenced actions are unpinned. This is a meaningful build-reproducibility weakness, though not a severe risk by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client-implementation Version * | — | — |
psr/http-factory-implementation Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.