rareloop/psr7-server-request-extension
The package is documented, tested, licensed, and backed by an organization, with only two runtime dependencies. Its tiny audience and fully unpinned workflow actions reduce confidence in long-term maintenance and build reproducibility.
68%
Total Score
83
100
83
83
Health Score Breakdown
The package has existed for over eight years but has only four releases, with a median interval of about two years; the release in the last 12 months shows it is not abandoned outright. This is a meaningful maintenance concern for a dependency.
There were no commits and no active maintainers in the last three months. The recent release and push partly offset this, but the current contribution activity remains thin.
The repository has only 2 stars, 2 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad review or community support.
Composer is used for the build, but no security-scanning tools were detected. For this small package that is a hygiene gap rather than a severe dependency risk.
The repository has no security policy. That weakens vulnerability-reporting transparency, although the package's small scope and limited runtime dependencies reduce the practical impact.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^2 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.