The source repository includes tests, a changelog, release notes, and a security policy. Maintenance evidence is limited to one release, with no commits or active maintainers in the last three months.
62%
Total Score
75
50
83
100
The package declares nine runtime dependencies, including several extensions and HTTP libraries, creating a moderate dependency surface for consumers.
This release is the package's only release, despite the package being about 326 days old. That limited history provides little evidence of sustained maintenance.
The repository had zero commits and zero active maintainers in the last three months. This is the clearest evidence of uncertain ongoing maintenance.
There were no new issues or pull requests in the last month and no merged pull requests. This is consistent with limited recent project activity, though open issue data is unavailable.
The repository has zero stars, forks, and watchers. Popularity is supporting evidence only, but these counts provide no additional adoption or community signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.6||^2.0 | — | — |
myclabs/php-enum Version ^1.7 | — | — |
php-http/httplug Version ^2.1 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
paquettg/string-encode Version ~1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.