shadowfiend/xai-whisper-provider
This is a very new, minimally established package: it has only one release, version v0.0.1, and no observed commit, issue, or pull-request activity yet. The linked repository matches the package, is not archived, includes tests, and the artifact has a declared MIT license, a reproducible-looking Composer lockfile, and no install-time lifecycle scripts. However, the absence of README and changelog material, security scanning, security policy, and any demonstrated maintenance history leaves meaningful uncertainty about maturity and ongoing support. It may be reasonable for evaluation or low-risk use, but it is not yet a strong dependency choice for critical production code.
58%
Total Score
50
50
72
90
Health checks
Six runtime dependencies, including the PHP runtime and standard PSR/Guzzle components, represent a meaningful dependency surface for a very young package, though the profile is not inherently excessive or unusual for this library.
Tests are present both in the artifact and repository, which is positive; the missing README and changelog are transparency gaps, but they are partly compensated by the test coverage evidence.
The repository is owned by an individual account rather than an organization, so the project has a single-person backing signal and no visible organizational support.
The package is brand new, with a release history of only one release and an age of 0 days. This provides no evidence of sustained maintenance or release reliability yet.
There were 0 commits and 0 active maintainers in the last 3 months. Because the repository is only 0 days old, this is partly explained by its age, but it still means maintenance capacity has not been demonstrated.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^3.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
psr/http-message Version ^2.0 | — | — |
shadowfiend/whisper Version ^0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 7 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.