This is a reasonably well-scaffolded, licensed, non-deprecated package backed by an organization-owned repository that was pushed recently and includes documentation, tests, a changelog, and a security policy. However, it is very new at 52 days old with only one release, has no observable popularity or issue activity, and the repository has no security-scanning tooling; the limited history makes long-term maintenance and maturity uncertain. It is usable for adoption with normal dependency review, but it does not yet have the track record of a highly established dependency.
72%
Total Score
83
100
83
100
The package is only 52 days old and has one release, so there is insufficient release history to establish sustained maintenance or compatibility maturity.
There are no open issues or pull requests and no activity in the last month; this is not inherently negative for a young, quiet project, but it provides little evidence of an active user or contributor community.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external adoption signal for a newly released package.
Composer is used as a build tool, but no security-scanning tool was detected, leaving a security-hygiene gap in repository automation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.