Package Health

php-mcp/server

Usable with caveats: this release is well-documented, tested, licensed, and backed by a matching organization repository, but maintenance appears to have stalled. There have been no commits, merged pull requests, or closed issues in the last three months, so verify that the SDK still fits your needs before adopting it.

Latest 3.3.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Dependency profilecaution

The package declares 13 runtime dependencies spanning PHP libraries, PSR interfaces, and ReactPHP components; this is a meaningful dependency surface but is coherent for an asynchronous MCP server SDK.

Release historycaution

The package has 18 releases over about 16 months with a median interval of about 3 days, but it has had no registry releases in the last 12 months, which raises maintenance concerns.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a substantial abandonment warning that is partly offset by the repository remaining unarchived and having prior release activity.

Repo issue activitycaution

Only one issue was opened and no issues or pull requests were closed or merged in the last month, indicating limited recent project response.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-maintenance gap for a package intended for server integrations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Kyrian Obikwelu

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^1.0 || ^2.0 || ^3.0
—
—
psr/clock
Version ^1.0
—
—
react/http
Version ^1.11
—
—
react/stream
Version ^1.4
—
—
psr/container
Version ^1.0 || ^2.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform