Tests, a clear MIT license, and pinned workflow actions support straightforward maintenance. Low repository visibility and no security policy reduce independent review.
79%
Total Score
83
88
75
One contributor made 90% of the recent commits, leaving maintenance concentrated despite a second active contributor and organization backing.
The repository has only 1 star and no forks, so independent adoption and review appear limited, though low popularity alone does not indicate poor maintenance.
The repository has no security policy, which limits guidance for reporting and handling vulnerabilities.
Version 0.8.0 is not marked prerelease, but the pre-1.0 major version suggests APIs may still change more than in a mature stable release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
quillstack/di Version ^0.6 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
quillstack/stream Version ^0.8 | — | — |
quillstack/header-bag Version ^0.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.