34%
Total Score
unhealthy
Risky: no releases or commits since January 2018 point to prolonged abandonment.
The package has made only 3 releases, all clustered on January 18, 2018, with no releases in the last 12 months. This is strong evidence of prolonged inactivity for a dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, while its last push was in January 2018. That strongly raises abandonment risk.
The artifact includes tests, which supports basic project maturity, but it has no README; for a reusable PHP library, that makes integration and maintenance harder.
Composer is used for builds, but no security-scanning tool is present. This weakens automated vulnerability detection and adds maintenance uncertainty.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe than the long inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version 1.0.2 | — | — |
php-di/php-di Version 5.* | — | — |
zendframework/zend-config Version 3.* | — | — |
http-interop/http-middleware Version ^0.4.1 | — | — |
zendframework/zend-expressive Version 2.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.