The small repository has no tests or security policy, though it includes a README and a declared license. Its seven runtime dependencies add maintenance surface for a project with no recent activity.
38%
Total Score
25
50
72
75
The latest release was in March 2019, and there have been no releases in more than seven years. Six releases arrived in a short initial burst, but there is no evidence of ongoing maintenance.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating a strong abandonment risk.
The package declares seven runtime dependencies, including framework and HTTP components. That creates meaningful compatibility and maintenance surface for a small project with no recent releases.
Only one registry account has publishing access. The repository is also user-owned rather than organization-backed, leaving limited visible maintainer capacity.
The repository has three stars, no forks, and no watchers. Popularity is only supporting evidence, but these counts provide little external evidence of sustained project use.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 | — | — |
cache/cache Version ^1.0 | — | — |
psr/container Version ^1.0 | — | — |
guzzlehttp/psr7 Version ^1.5 | — | — |
psr/http-message Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.