Healthy enough to use, but it is very new and has not yet demonstrated a sustained maintenance record. The repository is active, well documented, tested in source, licensed, and uses security and build tooling; its zero popularity and absent security policy add modest caution.
78%
Total Score
75
100
89
90
One registry publisher is a limited continuity signal, but the repository is user-owned under the same identity, so this is not inconsistent with a single-developer project.
The registry namespace and repository owner match, but the owner is an individual rather than an organization; this supports identity continuity without providing organizational redundancy.
The package is only 0 days old with three releases, and the median interval is about 15 minutes, so there is not yet evidence of sustained release maintenance.
The repository has zero stars, forks, and watchers. This is a caution for external adoption evidence, though the package is newly published and popularity is only supporting evidence.
No repository security policy is present, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
amphp/amp Version ^3.0 | — | — |
amphp/sync Version ^2.2 | — | — |
amphp/pipeline Version ^1.2 | — | — |
amphp/http-client Version ^5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.