Tests, release notes, and a matching repository provide useful transparency. Recent repository activity is absent, while the project has little adoption and no security scanning. Pin this version and reassess maintenance before upgrading.
66%
Total Score
83
100
83
67
There were 0 commits and 0 active maintainers in the last 3 months. Although a recent release exists, the lack of recent development activity raises maintenance and abandonment concerns.
The repository has 1 star, 0 forks, and 1 watcher, indicating very limited adoption. Popularity is only supporting evidence, but it lowers confidence in the size of the user and contributor base.
Composer build tooling is present, but no security-scanning tools were detected. For a small PHP library this is a transparency and hygiene gap rather than a severe dependency risk.
The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe to depend on.
v0.4.1 is not a stable-major release, so compatibility may still change before 1.0, but it is not marked as a prerelease and recent releases are not prerelease-heavy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version * | — | — |
technically/callable-reflection Version ^0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.