Usable with caveats: this is a well-scaffolded first release with tests, a license, and a matching repository, but it has no operating history yet and no recorded security scanning or maintenance activity beyond publication.
72%
Total Score
63
100
89
100
One registry publishing account is consistent with an individually owned project, but it provides limited observable publishing redundancy if that maintainer becomes unavailable.
The repository is owned by an individual user rather than an organization, so the single-account publishing and ownership model offers limited institutional backing.
This is the first release, published 0 days ago, so there is no release track record or demonstrated maintenance cadence yet.
There were zero commits and zero active maintainers in the last 3 months, but the repository was only pushed 0 days ago; this is an absence of history rather than evidence that activity has collapsed.
Composer build tooling is present, but no security scanning tools were detected. That leaves a modest assurance gap for a gateway with runtime HTTP dependencies.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phprise/http Version ^2.0 | — | — |
phprise/common Version ^2.0 | — | — |
guzzlehttp/psr7 Version ^2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.