Enables consumer driven contract testing, following the PACT foundation principles.
18%
Total Score
critical
Unfit to use: the package is deprecated and has had no releases or commits for over three years.
The registry marks the entire package as abandoned, not merely this release. That is a severe adoption risk despite the repository still being available.
The latest release was over three years ago, with no releases in the last 12 months. This indicates the package is no longer receiving release maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the stale release history and abandonment risk.
The release includes a license file and repository license, but the manifest declares MIT while the detected file is Apache-2.0. That mismatch creates a licensing clarification concern.
The package declares a post-update-cmd lifecycle script. This adds install/update behavior that deserves review, but the signal alone does not establish that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
amphp/amp Version ^2.5.1 | — | — |
amphp/dns Version ^1.2.3 | — | — |
amphp/log Version ^1.1 | — | — |
amphp/sync Version ^1.4.0 | — | — |
amphp/cache Version v1.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.