Clear Apache-2.0 licensing, a focused README, and organization ownership support adoption. Composer-only packaging is straightforward, but there is not yet enough project history to establish durable maintenance.
68%
Total Score
75
100
89
88
This is the first recorded release, published less than one day before collection, so there is no demonstrated release cadence or track record yet.
No commits or active maintainers were recorded in the last three months, leaving maintenance capacity unproven; the repository's immediate creation and the package's age of less than one day partly explain this result.
Composer build tooling is present, but no security-scanning tool was detected. For a tiny generated type-definition package this is a modest hygiene gap, not a severe risk.
The repository has no security policy. That weakens disclosure transparency, although the small metapackage contains no application runtime code.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tyhpdef/spiral-roadrunner-http-impl Version ~4.1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.