The repository includes tests, a matching license, and release notes for this version. Its sparse release history, absent recent commit activity, and fully unpinned workflow actions reduce confidence in long-term maintenance and build reproducibility.
66%
Total Score
50
100
81
83
Only one registry account has publish access, which limits publishing redundancy. The repository is also owned by an individual rather than an organization, so there is no provided organizational backing to offset that thin maintainer base.
Only three releases have appeared across 451 days, with two in the last 12 months and a median interval of about 226 days. This suggests a small, deliberate project but provides limited evidence of sustained maintenance.
The repository shows zero commits and zero active maintainers in the last three months. Although it was pushed recently and released today, the measured activity provides weak evidence of ongoing development.
The repository has no stars, forks, or watchers. Popularity is only supporting evidence, so this modestly lowers confidence but does not by itself indicate poor package health.
The project uses Make and Composer, but no security-scanning tool was detected. That is a modest repository hygiene gap rather than evidence that the package is unmaintained.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phrity/websocket Version ^3.7 || ^4.0 | — | — |
webonyx/graphql-php Version ^15.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.