The package has no README, tests, changelog, or repository security policy, leaving consumers with little guidance or visible assurance. Its small dependency set and clean install behavior help, but the project shows little evidence of ongoing development.
42%
Total Score
0
100
63
75
Only one release exists, published about 13 months ago, with no releases in the last 12 months. That provides weak evidence of continued maintenance for a new library.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the single-release history, this is strong evidence of stalled maintenance.
The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but a missing README is a real usability and transparency gap for a PHP library.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no external sign of adoption or community support.
Composer is used for the build, which is appropriate for this package, but no security scanning tools are configured. That is a modest assurance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/promise Version ^3.2 || ^2.0 || ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.