The package is minimal, clearly licensed, and has no install-time scripts. Its stable interface and organizational backing help, but the tiny README leaves little guidance for consumers.
48%
Total Score
75
64
100
Only two releases exist, with the latest published over 8 years ago and none in the last 12 months; this is strong evidence of abandonment risk despite the stable 1.1 version.
The release includes a README, but it is only 18 characters long and offers almost no consumer guidance. Missing tests and a changelog are normal for the published artifact and are not concerns here.
The repository has no open issues or pull requests and recorded no recent activity; alongside the old release history, this reinforces the lack of current maintenance evidence.
The repository has no stars or forks and only one watcher, providing no supporting adoption signal. Popularity is secondary, but this offers little compensation for the stale maintenance record.
The repository is not archived, which is a positive counterweight, but it was last pushed over 8 years ago and therefore provides little evidence of active maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aura/router Version ~3.0 | — | — |
psr/http-message Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.