Its documentation, tests, changelog, and security policy provide a solid foundation for a focused compatibility fork. The small project footprint and unpinned CI actions leave maintenance and build reproducibility less established.
60%
Total Score
50
78
100
This is a young package with one release in 98 days and no established release cadence, so long-term maintenance is not yet demonstrated.
The repository recorded zero commits and zero active maintainers in the last 3 months. Because the package is only 98 days old, this is concerning but not evidence of long-term abandonment by itself.
The repository has 2 stars, 0 forks, and 0 watchers. Popularity is limited supporting evidence rather than a verdict, but it provides little external evidence of maturity.
The project uses Composer and Make, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not a severe risk on its own.
Version 0.4.4 is not a stable-major release, which signals compatibility expectations may still change despite the release being non-prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/socket Version ^1.0 || ^0.8 || ^0.7 || ^0.6 || ^0.5 | — | — |
guzzlehttp/psr7 Version ^1.7|^2.0 | — | — |
ratchet/rfc6455 Version ^0.3.1 | — | — |
symfony/routing Version ^2.6|^3.0|^4.0|^5.0|^6.0|^7.0|^8.0 | — | — |
react/event-loop Version >=0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.