The package has a useful README, tests, MIT licensing, and no install-time scripts. Its organization-backed repository is not archived, but the small user base and missing security policy leave less evidence of ongoing care.
62%
Total Score
75
78
75
The package has had no release in more than 3 years, despite eight releases overall; this is substantial evidence that maintenance has stopped or slowed sharply.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no release since July 2022.
Two stars, no forks, and three watchers indicate a very small user and contributor base, providing limited external evidence of active maintenance.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest gap in automated maintenance hygiene.
The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities, although this is less serious than a deprecated or archived project.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.5 | — | — |
symfony/config Version ^4.4 || ^5.4 || ^6.0 | — | — |
guzzlehttp/psr7 Version ^2.4 | — | — |
symfony/routing Version ^4.4 || ^5.4 || ^6.0 | — | — |
psr/http-message Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.