Is Promise Safe?

Promise — Nerq Trust Score 63.2/100 (C+ grade). Score based on 2 independent trust signals. Last analyzed: 2026-03-20

Promise is a PHP package with a Nerq Trust Score of 63.2/100 (C+), based on 3 independent data dimensions. Last analyzed: 2026-03-20 Security: 90/100. Popularity: 100/100. Data sourced from packagist.org, GitHub, and NVD. Last updated: 2026-03-20. Machine-readable data (JSON).

Is Promise safe?

Trust Score Breakdown — Promise has a Nerq Trust Score of 63.2/100 (C+). Measured across 2 independent trust signals (as of 2026-03-20).

Security Analysis → Promise Privacy Report →

What is Promise's trust score?

Promise has a Nerq Trust Score of 63.2/100, earning a C+ grade. This score is based on 2 independently measured dimensions including security, maintenance, and community adoption.

Security
90
Popularity
100

What are the key security findings for Promise?

Promise's strongest signal is popularity at 100/100. No known vulnerabilities have been detected.

✓Security score: 90/100 (strong)
⚠Popularity: 100/100 — 2,470 stars on PHP Packages

What is Promise and who maintains it?

Authorreact
CategoryPHP Packages
Stars2,470
SourceN/A

Promise Across Platforms

Same developer/company in other registries:

React Developer Tools
55/100 · firefox

Similar Packagist by Trust Score

psr/container (63)guzzlehttp/guzzle (63)symfony/event-dispatcher (63)symfony/polyfill-ctype (63)phpunit/php-file-iterator (63)
See all safest Packagist →

Compare

Promise vs psr/containerPromise vs guzzlehttp/guzzlePromise vs symfony/event-dispatcher

Safety Guide: Promise

What is Promise?

Promise is a PHP package — A lightweight implementation of CommonJS Promises/A for PHP.

How to Verify Safety

Run composer audit. Check packagist.org.

You can also check the trust score via API: GET /v1/preflight?target=react/promise

Key Safety Concerns for PHP package

When evaluating any PHP package, watch for: dependency vulnerabilities, PHP compatibility.

Measured Signals

Promise has a Nerq Trust Score of 63/100 (C+). This score is a composite of automated measurements of security, maintenance, community, and quality signals.

Key Takeaways

Frequently Asked Questions

Is Promise Safe?
react/promise with a Nerq Trust Score of 63.2/100 (C+). Strongest signal: popularity (100/100). Score based on Security (90/100), Popularity (100/100).
What is Promise's trust score?
react/promise: 63.2/100 (C+). Score based on Security (90/100), Popularity (100/100). Scores update as new data becomes available. API: GET nerq.ai/v1/preflight?target=react/promise
What are safer alternatives to Promise?
In the PHP Packages category, more PHP packages are being analyzed — check back soon. react/promise scores 63.2/100.
Does Promise have known vulnerabilities?
Nerq checks Promise against NVD, OSV.dev, and registry-specific vulnerability databases. Current security score: 90/100. Run your package manager's audit command for the latest findings.
Is Promise actively maintained?
Promise maintenance score: N/A. Check the repository for recent commit activity and issue responsiveness.
API: /v1/preflight Trust Badge API Docs

See Also

Disclaimer: Nerq trust scores are automated measurements based on publicly available signals. They are not endorsements, verdicts, or guarantees of suitability. Always evaluate the signals against your own requirements.

We use cookies for analytics and caching. Privacy