xiaoyi510/psr7
The package includes a substantial README, changelog, license, tests in its repository, and only three runtime dependencies. Its old release history and inactive repository leave maintenance and compatibility risk, while workflows use unpinned container images.
39%
Total Score
25
100
69
67
Health Score Breakdown
The latest release was about 5 years and 8 months ago, with no releases in the last 12 months and 17 releases overall. This strongly increases abandonment and compatibility risk.
The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the old release history, this is strong evidence that maintenance has stopped.
The repository is owned by a user account rather than an organization, so there is no provided evidence of broader project backing. This makes the zero-activity and thin-maintenance evidence more consequential.
The repository uses Make and Composer, showing basic build tooling, but reports no security scanning tools. The missing scanning is a modest transparency and maintenance gap.
The linked repository is not archived, which avoids an explicit abandonment marker. However, its last push was about 5 years and 8 months ago, so the unarchived status is only limited reassurance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Michael Dowling |
| Tobias Schultze |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ~1.0 | — | — |
ralouphie/getallheaders Version ^2.0.5 || ^3.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.