68%
Total Score
caution
Usable with caveats: only two releases and one active contributor leave maintenance capacity lightly proven.
The package is 277 days old with only two releases, spaced about 181 days apart. This shows some release activity but leaves its maintenance pattern lightly established.
One contributor made 100% of the last three months' commits. Organization backing provides some handoff potential, but no second active contributor is evidenced.
Only one commit was recorded in the last three months, by one active maintainer. That is some recent activity, but it provides limited evidence of sustained maintenance.
Composer build tooling is present, but no security scanning tool was detected. For a small library this is a transparency gap rather than a severe risk.
The repository has no security policy. This does not show a security defect, but it leaves vulnerability reporting and maintenance expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/openapi-psr7-validator Version ^0.22.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.