52%
Total Score
caution
Usable with caveats: sparse releases, no recent commits, and no license increase long-term dependency risk.
The release declares 26 runtime dependencies, including many framework and related Verdient components. This increases upgrade coupling and the number of transitive components that must remain compatible.
No license is declared, and neither the package nor linked repository contains a recognized license file. That leaves the legal terms for reuse unclear.
The artifact has no README, tests, or changelog, and the repository also reports no tests or changelog. The missing tests reduce maintenance confidence for a library, while the missing changelog is a smaller documentation gap.
Only two releases exist across 946 days, with one release in the last 12 months and a median interval of about 735 days. This indicates a slow maintenance cadence and raises abandonment risk.
There were no commits and no active maintainers in the last three months. Although the repository was recently pushed, the observed short-term development activity is weak.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
hyperf/di Version ^3.1 | — | — |
hyperf/event Version ^3.1 | — | — |
verdient/cli Version ^1.0 | — | — |
hyperf/config Version ^3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.