The MIT license and small dependency set make the package straightforward to adopt. Maintenance confidence is limited by 17 months without a release, one maintainer, and a repository that could not be found.
45%
Total Score
50
100
80
100
The package has had three releases, but none in the last 12 months and the latest release was 17 months ago. This is a meaningful maintenance and abandonment concern for a dependency.
Only one registry maintainer is listed, leaving little visible maintainer redundancy if that person stops maintaining the package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.