The package has a clear MIT license, documentation, tests, and a matching repository. Its 0.x status, missing security policy, and minimal adoption add uncertainty for a new dependency.
36%
Total Score
0
71
88
This is the package's only release, published about 7 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the old last push, this materially increases abandonment risk.
The repository has 1 star, 0 forks, and 0 watchers, providing little evidence of broad community use or support.
The repository has no security policy. This is a transparency and maintenance gap, although it is less severe than the absence of recent development.
Version 0.1.0 is not a stable major release, so the package has limited maturity evidence in addition to its one-release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
php-http/httplug Version ^2.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
php-http/discovery Version ^1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.