The package is small and straightforward to integrate, with clear licensing, tests, and release notes. Maintenance is thin: only one commit from one contributor in the past three months, no releases in the past year, and workflow references are all unpinned.
68%
Total Score
67
83
50
The package has six releases since June 2023, but none in the past 12 months; this indicates slower release activity and raises moderate maintenance concern.
One contributor made all commits in the past three months, leaving the project dependent on a single recent maintainer.
Only one commit was recorded in the past three months, showing limited recent maintenance activity despite the repository remaining active.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so users are given no documented channel or process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
php-http/discovery Version ^1.18 | — | — |
psr/http-client-implementation Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.