Client of Tea for PHP
72%
Total Score
88
100
89
75
The package has 44 releases and historically released about every 9 days, but it has had no registry release in more than three years. Recent repository activity partly offsets this, but the registry release is stale.
Only one issue and one pull request are open, with no new or closed items in the last month. This shows little current issue-management activity, though the small backlog is not itself severe.
The repository has 7 stars and 5 forks, indicating limited community adoption. This is supporting evidence only and is outweighed by the organization backing and recent commits.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a dependency used in applications.
The only workflow lacks top-level token permissions. No write permissions were detected, but explicitly constraining workflow tokens would provide stronger supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3|^7.0 | — | — |
adbario/php-dot-notation Version ^2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.