The source includes a full test suite, clear licensing, and release notes for this version. Maintenance has slowed, with no commits in three months and no releases in the last 12 months.
68%
Total Score
50
100
83
83
The repository is owned by an individual account rather than an organization. That does not establish poor health, but it provides less visible institutional backing for the small maintainer base.
The package has 18 releases since July 2018, but none in the last 12 months and the latest release was over a year ago. This indicates slowed maintenance rather than abandonment by itself.
There were zero commits and zero active maintainers in the last three months. Although the package released about a year ago, the current lack of source activity lowers confidence in ongoing maintenance.
The repository has 10 stars and 1 fork, showing limited adoption. Popularity is only supporting evidence, so this modest reach is a minor caution rather than a decisive health problem.
The repository uses Make and Composer, but no security-scanning tools were detected. This is a modest repository-hygiene gap, not evidence that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.