The project has recent release and commit activity, with tests in the repository and a clear license. Maintenance still depends entirely on one active contributor, and no security policy is published.
70%
Total Score
75
100
81
75
The package is mature at about 9 years old and had 2 releases in the last 12 months, but only 3 releases overall and a median interval of about 4 years 4 months indicate an irregular history.
All 21 recent commits came from one contributor, so maintenance has a concentrated bus factor even though that contributor is currently active.
Composer build tooling is present, but no security-scanning tool was detected. For a small library this is a modest transparency gap rather than a severe risk.
The repository has no published security policy, leaving reporting and response expectations unclear for consumers.
Version 0.3.0 is not on a stable major version, so compatibility may still change between minor releases; it is not a prerelease, which partly offsets that concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.7 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.