The package has a clear license and a small, conventional dependency set. Its missing README and absent security scanning make adoption less transparent, while the long period without maintenance remains the main concern.
38%
Total Score
0
64
83
This is the only release, published in August 2018, with no releases in the past 12 months; more than eight years without a new release indicates substantial abandonment risk.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the package's long release gap and providing no evidence of ongoing maintenance.
The package includes tests, which is a small positive, but it has no README and no changelog. The missing consumer documentation is a real transparency gap for an SDK library.
The repository has zero stars and zero forks, with one watcher. This offers little supporting evidence of community adoption, though popularity is secondary to the observed maintenance record.
Composer is used for the build, but the repository reports no security scanning tools. This is a maintenance and assurance gap, although it does not outweigh the inactivity evidence by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ~6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.