Documentation and publishing basics are in place, with examples, release notes, and a security policy. The organization-owned repository and clean, fully analyzed workflows add useful safeguards.
68%
Total Score
67
79
100
The package is only 104 days old and has three releases, with a median interval of about 6 days. This shows early activity but is still a limited maintenance record.
One contributor made all commits in the last three months, creating a concentrated maintenance dependency. Organization ownership provides some ability to hand work off, but no second active contributor is shown.
Only one commit and one active maintainer were recorded in the last three months. The recent activity is positive, but the very small sample indicates sparse maintenance evidence.
Composer build tooling is present, but no security-scanning tooling was detected. For an API library, that is a modest transparency and maintenance gap rather than a severe concern.
Version v0.2.1 is not a stable major release, although it is not marked as a prerelease and recent releases have not used prerelease versions.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1 | — | — |
psr/http-message Version ^1|^2 | — | — |
php-http/discovery Version ^1 | — | — |
psr/http-client-implementation Version ^1 | — | — |
psr/http-factory-implementation Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.