Documentation, tests, and licensing are in place. The project has had no release for nearly 8 years and no recent commits, making abandonment the main concern.
42%
Total Score
50
50
75
83
The latest release was published in November 2018, with no releases in the last 12 months; this long release gap is a strong abandonment concern.
There were zero commits and zero active maintainers in the last three months, consistent with the release history and indicating a serious abandonment risk.
The package declares 13 runtime dependencies, creating meaningful maintenance surface, although the dependency list is explicit and includes standard PHP and PSR components.
There are three open issues but no new or closed issues and no pull-request activity in the last month, indicating no visible current maintenance.
Composer is used as the build tool, but no security-scanning tools are present; this is a modest transparency and maintenance gap rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 | — | — |
ramsey/uuid Version ^3.8 | — | — |
greg0ire/enum Version ^4.0 | — | — |
php-http/httplug Version ^1.0 | — | — |
php-http/message Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.