The project includes tests, a clear MIT license, release notes, and a current stable release. Its small maintainer base and limited security tooling leave less resilience if maintenance stops.
68%
Total Score
50
88
83
One registry maintainer is consistent with an independently owned project, but it provides little publishing redundancy if that person becomes unavailable.
The repository is owned by the same individual namespace as the package, with no organization backing shown; this supports ownership alignment but not maintainer redundancy.
The package has only three releases since April 2020, with a median interval of about 2.9 years, indicating a sparse release cadence despite a release in the last 12 months.
There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern even though the repository was recently pushed.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month; this offers limited evidence of active collaboration.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.2 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
raigu/x-road-soap-envelope-builder Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.