Its small two-interface footprint, stable major version, and limited runtime dependencies reduce compatibility risk. The repository has a changelog and Composer build tooling, but provides little evidence of active ongoing care or security oversight.
65%
Total Score
50
100
83
75
The package is over three years old with four releases, one in the last 12 months, and a median interval of about 318 days. This indicates a slow but not abandoned release cadence for a small library.
There were zero commits and zero active maintainers in the last three months. Combined with the slow release cadence, this leaves ongoing maintenance capacity uncertain.
Composer build tooling is present, supporting reproducible project setup, but no security scanning tooling was detected. The missing scanning is a modest oversight rather than a severe dependency risk.
The repository has no security policy. For a small library this is a transparency gap, though the limited code and dependency surface reduce its practical impact.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.