Finds and installs PSR-7, PSR-17, PSR-18 and HTTPlug implementations
68%
Total Score
67
100
88
83
The project has a long history with 57 releases and a typical historical interval of about 23 days, but it has made no registry release in the last 12 months.
No commits and no active maintainers were recorded in the last three months. This is a meaningful maintenance concern, although the repository is not archived and has a long release history.
The repository has only three open issues and two open pull requests, with one issue closed recently, but no new issues or merged pull requests in the last month indicates limited current activity.
Composer is used for builds, but no security scanning tool was detected. The missing scanner is a hygiene gap rather than evidence that the package is unsafe.
All four workflows lack top-level token permissions declarations. No workflow requests top-level write access, but explicit least-privilege declarations would improve CI transparency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.