The package has a clear README, explicit GPL-3.0 licensing, and no install-time scripts. Its single-maintainer project has no security policy and offers little evidence of ongoing support.
12%
Total Score
25
50
75
Packagist marks the entire package as abandoned, with no replacement specified. Package-level deprecation is a severe adoption risk because future fixes and support are uncertain.
The repository recorded zero commits and zero active maintainers in the last three months. This confirms the absence of current development activity rather than merely showing a slow cadence.
The linked GitHub repository is archived, and its last push was on November 18, 2024. An archived source repository is a strong indication that the release is no longer maintained.
Only one registry account has publishing access. The individual ownership context makes this a thin support base, especially alongside the repository's archived state.
The package has four releases, all concentrated around November 18, 2024, and no releases in the following 12 months. This short release history does not offset the package-level abandonment signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.