The repository includes tests, release notes, a clear README, and an MIT license. Its very recent history and single-contributor maintenance leave limited evidence of long-term resilience.
68%
Total Score
83
81
67
This is the first release, published today, so there is no history demonstrating sustained maintenance or reliable release cadence yet.
All 16 recent commits came from one contributor, creating a meaningful continuity risk even though the repository is organization-owned.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, making vulnerability reporting and response expectations less clear for adopters.
Version v0.1.0 is an early, non-stable-major release, so APIs and behavior may change as the project matures.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
php-http/discovery Version ^1.19 | — | — |
psr/http-client-implementation Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.