Usable with caveats: the release is well-scaffolded, licensed, tested, and backed by a matching organization repository, but it has had no release or commit activity for about two years and nine months. Check compatibility carefully before adopting it as an actively maintained dependency.
68%
Total Score
67
100
79
75
The package has 11 releases since June 2021 with a typical interval of about 46 days, but no releases in the last 12 months and its latest release was about two years and nine months ago. This indicates a previously established project with currently stale maintenance.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long gap since the latest release. The repository is not archived, but current maintenance capacity is not demonstrated.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a quiet project, but without evidence of ongoing maintenance it contributes to the broader caution about staleness.
The repository has zero stars and one fork, providing little community validation. Popularity is only supporting evidence, so this modestly limits confidence rather than making the package unfit to use.
No security policy is present in the repository. This is a transparency gap, though the package has other security-related tooling and the absence is not by itself evidence that the dependency is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
webmozart/assert Version ^1.10 | — | — |
pheature/toggle-crud Version ^0.8 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.