The package is clearly licensed, documented, and tested in its repository, with no install-time scripts. Its broad runtime dependency set and absent security policy add modest maintenance concerns.
58%
Total Score
50
50
83
83
The latest release was on August 26, 2018, and there have been no releases in the last 12 months. The nine-release history shows earlier activity but leaves this version with a long period without published updates.
The package declares 12 runtime dependencies, creating a relatively broad dependency surface for consumers to track and keep compatible. No provided signal shows that this surface is actively maintained.
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance. This is partly offset by the repository not being archived and having three open pull requests.
No repository security policy was found. This is a transparency gap, though it is less significant for a small middleware package than evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
middlewares/uuid Version ^1.0 | — | — |
middlewares/cache Version ^1.0 | — | — |
middlewares/https Version ^1.1 | — | — |
joshdifabio/composed Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.