Usable with caveats: this release is well-documented, tested, licensed, and backed by a matching organization repository, but maintenance appears to have stalled. There have been no commits, merged pull requests, or closed issues in the last three months, so verify that the SDK still fits your needs before adopting it.
62%
Total Score
75
50
89
75
The package declares 13 runtime dependencies spanning PHP libraries, PSR interfaces, and ReactPHP components; this is a meaningful dependency surface but is coherent for an asynchronous MCP server SDK.
The package has 18 releases over about 16 months with a median interval of about 3 days, but it has had no registry releases in the last 12 months, which raises maintenance concerns.
There were zero commits and zero active maintainers in the last three months, a substantial abandonment warning that is partly offset by the repository remaining unarchived and having prior release activity.
Only one issue was opened and no issues or pull requests were closed or merged in the last month, indicating limited recent project response.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-maintenance gap for a package intended for server integrations.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 || ^2.0 || ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
react/http Version ^1.11 | — | — |
react/stream Version ^1.4 | — | — |
psr/container Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.