Its dependency footprint is small and install-time scripts are absent. The linked project is not archived, but its zero-star repository and lack of security tooling leave little evidence of ongoing support.
44%
Total Score
100
63
75
The latest release was published in February 2022, with no releases in roughly four years. Although the package has 12 releases and a regular earlier cadence, the long current gap raises abandonment risk.
No license declaration, license file, or repository license file was detected, leaving the legal terms for reuse unclear.
The published artifact has no README, tests, or changelog, and the repository also reports none. Missing tests and changelog are not unusual in a published artifact, but the absence of a README is a meaningful consumer-transparency gap for this library.
The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of adoption or community support.
Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than evidence of an unsafe release by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version * | — | — |
adimeo-data-suite/commons Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.