Its MIT license, tests, README, and matching repository make adoption straightforward. Organization backing provides some handoff capacity, but absent security tooling and policy leave less independent assurance.
66%
Total Score
67
81
75
The package is young at 52 days, but it has 11 releases in that period, with a median interval of about 13 hours; this shows active development while leaving limited long-term evidence.
One contributor made 100% of the 8 recent commits. Organization backing partly compensates for this concentration, but the project still has limited observed individual redundancy.
The repository recorded 8 commits in the last three months, showing recent activity, but that activity is not broad enough to offset contributor concentration.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest gap in independent security assurance.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.8 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.