The package is small and clearly documented, with a matching repository and no install-time scripts. However, it has had no release or commit activity since October 2022, and the repository has no tests or security policy, making long-term maintenance uncertain.
45%
Total Score
63
100
67
88
Only two releases exist, with the latest published in October 2022 and none in the last 12 months; this long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, strongly reinforcing the maintenance concern shown by the release history.
There were no new or merged pull requests in the last month, consistent with an inactive project, although open issue data is unavailable.
The repository has zero stars, forks, and watchers, offering no community adoption or review evidence. Popularity is supporting evidence, but the complete absence of it modestly increases uncertainty.
Composer is used for the build, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/http Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.