quillstack/uri
Healthy and suitable to depend on, with a small maintenance-continuity caveat. It has recent releases, active commits from two contributors, tests, licensing, and basic security tooling, though most recent commits come from one contributor and the workflow lacks explicit token permissions.
82%
Total Score
88
100
94
75
Health Score Breakdown
One contributor made 24 of 26 recent commits, creating a meaningful continuity risk. The second active contributor and organization-owned repository partly compensate, so this is caution rather than danger.
The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap but not evidence that the package is unsafe to use.
The only workflow lacks top-level token permissions. No write permissions were observed, but explicit least-privilege declarations would provide stronger workflow assurance.
Version 0.7.0 is not a stable-major release, so API compatibility may still change before 1.0, but it is not marked as a prerelease and recent release activity provides compensating evidence of active development.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Radek Ziemniewicz |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.0|^2.0 | — | — |
quillstack/validator-interface Version ^0.6 | — | — |
Weekly Downloads
Info
- Last Published
- 28 days ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.