The MIT license and direct Composer build keep the package easy to inspect and install. Pin v2.0.2 and validate it in your application because support evidence is still limited.
58%
Total Score
50
100
79
100
The artifact has no README, tests, or changelog, and the linked repository also reports none; the missing README and tests reduce transparency for a library consumers must integrate.
The package has three releases within its first day, showing active initial publishing but no established release track record yet.
The repository shows no commits or active maintainers in the last three months, although its latest push coincides with this release and the package is newly created.
The repository name does not match the package name, and no README package mention was found, leaving some uncertainty that the linked repository is the package's intended source.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
niangpro/core Version self.version | — | — |
niangpro/http Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.