Usable with caveats: the package is licensed, documented, tested in its repository, and backed by an organization with a matching source repository. Maintenance has slowed, with no registry release in the last 12 months and no commits in the last 3 months, so monitor it before adopting broadly.
68%
Total Score
67
100
81
67
The package has existed since July 2021 with seven releases, but it has had no release in the last 12 months and its median interval is about 272 days, indicating slow maintenance rather than abandonment by itself.
The repository recorded zero commits and zero active maintainers in the last 3 months, which is the clearest maintenance concern; the recent push and established release history provide only partial reassurance.
There are no open issues or pull requests, and no issue or pull-request activity in the last month. This is consistent with a small quiet project but provides little evidence of active community maintenance.
The repository has only 8 stars, 6 forks, and 2 watchers, indicating limited adoption; this is supporting context rather than a decisive concern because the project has matching source, tests, and organizational backing.
No security policy is present in the repository, leaving vulnerability-reporting expectations unclear; the lack of dangerous workflow patterns and the presence of security scanning partly compensate for this documentation gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
php-http/discovery Version ^1.14 | — | — |
symfony/polyfill-php80 Version ^1.23 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.