Its MIT license, focused file tree, and included tests make the release easy to inspect. A single maintainer and no security policy reduce resilience if defects or vulnerabilities emerge.
46%
Total Score
25
67
75
The package has had no release in more than three years, with only four releases overall; this indicates a substantial abandonment risk despite its earlier regular release interval.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of ongoing maintenance capacity.
One registry maintainer is a thin publishing base for a user-owned project, leaving little redundancy if that maintainer becomes unavailable.
The repository has no security policy, so users lack a documented reporting and response path if a vulnerability is found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.4 | — | — |
guzzlehttp/psr7 Version ^2.1 | — | — |
league/flysystem Version ^2.0|^3.0 | — | — |
slacker775/backblaze-b2-api Version ^0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.