It is a small, stable abstraction with a clear README, release notes, minimal dependencies, and organization backing. The artifact has no install-time scripts, and the repository is still available and correctly matched to the package.
68%
Total Score
75
100
94
88
The package has had no release in three years and no releases in the last 12 months, which lowers confidence in ongoing maintenance. Its seven releases over more than eight years still show an established, deliberately stable project.
There were zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating little current maintenance activity.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, but the package is a small interface-only abstraction with a minimal dependency profile.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.