The source includes tests, a README, and a license, which supports straightforward use. Limited security documentation and a one-person publishing base add ongoing maintenance risk.
58%
Total Score
25
100
71
75
The latest release was published on February 8, 2023, with no releases in the last 12 months. That is a substantial maintenance gap for a package released nine times since 2020.
There were no commits and no active maintainers in the three months measured. This is a direct sign that maintenance capacity may have stalled, partly tempered by the repository's November 2024 push.
The artifact contains a LICENSE file and the repository also has one, but the manifest declares MIT while the detected license text is BSD-3-Clause. That inconsistency warrants checking licensing before adoption.
Only one registry publishing account is listed, leaving little visible publishing redundancy. The repository is user-owned rather than organization-owned, so this is a meaningful but not decisive continuity concern.
Composer is used for builds, but no security scanning tools were detected. For a library that processes application responses, the missing automated security coverage is a modest transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
skyline/router Version ^8 | — | — |
tasoft/event-manager Version ^1.0 | — | — |
tasoft/service-manager Version ^2.2 | — | — |
skyline/exposed-symbols Version ^8 | — | — |
symfony/http-foundation Version ^6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.