The small repository has no tests or security scanning, and its lone maintainer leaves little redundancy. Its README and exact-version release notes help consumers, but the project has no recent activity.
45%
Total Score
25
50
50
Only two releases were published, both in July 2023, with no releases in the past three years. This indicates a largely inactive release process for a library that may need compatibility maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, while the latest push was in August 2023. That leaves current maintenance and abandonment risk unresolved.
No declared license or license file was found in the package or repository. This creates a material adoption and redistribution constraint.
Registry publishing is controlled by one individual, and project_backing identifies a personal repository rather than an organization. Combined with no recent commit activity, this provides little maintainer redundancy.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no meaningful external maintenance signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version >=7.0 | — | — |
textalk/websocket Version >=1.5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.