Documentation, tests, licensing, and packaging are all in good shape. Maintenance capacity is narrow, so pinning this version and monitoring the repository is prudent.
67%
Total Score
50
88
83
There have been 7 releases since June 2018, but none in the last 12 months and the latest registry release was in November 2024. Recent repository activity partly offsets the slow release cadence, but published maintenance is sparse.
All recent commits came from one contributor, giving the project a high concentration risk. No organization backing is shown to compensate for that narrow base.
The repository recorded only 1 commit in the last 3 months, with 1 active maintainer. This is some recent activity, but it indicates limited ongoing maintenance capacity.
Composer and Robo provide build tooling, but no security-scanning tools were detected. The tooling is useful, though security visibility is limited.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for an authorization library.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nategood/httpful Version ^1.0 | — | — |
shawm11/hawk-auth Version ^1.0 | — | — |
shawm11/iron-crypto Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.