The source project has tests, a changelog, an MIT license, and organization backing. Its last registry release was in August 2024, so updates may be slow; pin this version if adopting it.
67%
Total Score
75
88
50
The package has 53 releases but none in the 12 months before collection, with the latest published in August 2024. This is a meaningful maintenance concern, though the linked repository is still present and not archived.
There were no commits and no active maintainers in the three months before collection. The recent repository push is compensating evidence that the project is not archived, but it does not show sustained current development.
Composer build tooling is present, which fits the package ecosystem. No repository security-scanning tool was detected, leaving a minor hygiene gap.
The repository has no security policy. This lowers transparency for reporting vulnerabilities, but it is not by itself evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.