It includes a README, tests, a matching repository, and MIT licensing, making the small package transparent and straightforward to inspect. Its sole 0.1.0 release and zero recent commits leave maintenance and compatibility uncertain. Pinning this exact version is safer than expecting updates.
42%
Total Score
0
79
75
This is the package's only release, published about 9 years ago, with no releases in the last 12 months. That strongly suggests the project is inactive and may not receive compatibility fixes.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long period without releases. This leaves maintenance capacity unproven.
The repository has no security policy, leaving no documented channel for reporting vulnerabilities. For a small HTTP response library this is a transparency gap, though it is less serious than the inactivity evidence.
The assessed version is 0.1.0 and is not marked as a stable major release, so its API maturity is limited. The complete artifact and tests provide some compensation but do not establish ongoing compatibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/plates Version ^3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.