Usable with caveats: this is a young pre-1.0 package with only two releases published about an hour apart and no declared source repository. The artifact itself is well documented, licensed, tested, and free of install-time scripts, but limited history and transparency make long-term maintenance harder to verify.
67%
Total Score
100
80
100
The package is only 45 days old and has two releases, both published within roughly 1 hour, so there is little evidence of sustained maintenance or a settled release cadence.
Version 0.1.4 is not marked as a prerelease, but the package remains before a stable major version, indicating an early API and project maturity stage.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
pilotphp/grpc Version ^0.1.4 | — | — |
pilotphp/http Version ^0.1.4 | — | — |
google/protobuf Version ^3.7 || ^4.0 || ^5.0 | — | — |
pilotphp/runtime Version ^0.1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.