A complete README, tests, changelog, and MIT license make the package understandable and legally usable. The matching repository is not archived and has no install-time scripts, but lacks a security policy.
45%
Total Score
0
75
75
The package has only 3 releases since May 2017, with no releases in nearly four years and a median release interval of about 5.5 years. This is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and indicating no recent maintenance capacity.
No security policy was found in the repository, reducing transparency for reporting and handling vulnerabilities. The package's README and tests improve general project clarity but do not replace this policy.
Version 1.0.1-beta is still marked as a prerelease, so consumers do not have a clearly stable release to depend on. The stable major version indicator provides limited compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
superbalist/php-pubsub Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.