The release includes clear licensing, release notes, repository tests, a changelog, and security tooling. Its small dependency surface is helpful, but the project shows no recent activity and lacks a dependable maintenance path.
12%
Total Score
0
100
57
75
Packagist marks the entire package as abandoned and names phpolar/core as its replacement. This directly weakens confidence that future fixes or releases will arrive.
The repository recorded zero commits and zero active maintainers in the last three months. This supports the abandonment concern rather than compensating for the archive status.
The linked source repository is archived, despite having been pushed on June 23, 2025. An archived repository is a severe abandonment concern for a dependency.
The package has 14 releases over about three years, but none in the last 12 months. Earlier releases show activity, while the recent pause is consistent with the abandoned status.
The repository name does not match the package name and its README does not mention the package, creating some uncertainty about package ownership. The mismatch could be normal for a subpackage, so this is only a caution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^2.0 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.