The library is well documented, tested, licensed, and tied to a matching organization-owned repository. Maintenance has stopped since August 2022, with no security scanning and a high-confidence unpinned container image finding.
58%
Total Score
75
50
88
67
Ten runtime dependencies create meaningful dependency surface for a library, but the profile is declared and includes ordinary PHP HTTP and serialization components rather than an unusually large set.
The package has six releases since October 2018, but none in the last 12 months and its latest release was in August 2022. That long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence that maintenance has stopped.
There are no open issues or pull requests, but there is also no recent issue or pull-request activity; this is consistent with a quiet project rather than evidence of active maintenance.
Composer build tooling is present, but no security scanning tools were detected. For a maintained dependency, that weakens supply-chain transparency and upkeep.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/cache Version ^1.6 | — | — |
jms/serializer Version ^3.4 | — | — |
php-http/message Version ^1.6 | — | — |
php-http/discovery Version ^1.3 | — | — |
doctrine/annotations Version ^1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.