pogo/websocket
Repository tests, a changelog, and Composer security scanning add useful safeguards. The pre-1.0 version, inactive recent commits, and unpinned workflow actions leave meaningful maintenance and build-integrity concerns.
51%
Total Score
50
100
79
75
Health Score Breakdown
Neither the package nor the linked repository declares or contains a detected license, leaving developers without clear permission to use, modify, or redistribute the code.
The package is only 253 days old with nine releases, but its latest release was about four months ago, suggesting an early project whose release momentum has stopped.
The repository recorded zero commits and zero active maintainers in the last three months, a direct sign of stalled maintenance for a young package.
There were no issues closed in the last month and none of the ten open pull requests were merged, which supports the concern that project activity is not translating into completed maintenance.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravel/octane Version ^2.0 | — | — |
pusher/pusher-php-server Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.