The MIT license, README, and release notes give basic usage and licensing context. Its small footprint limits transparency, while no security policy or scanning adds little assurance.
35%
Total Score
50
69
75
This package has only one release, published about 10 years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk.
The repository had no commits and no active maintainers in the last three months. Combined with the long-old last push, this materially raises abandonment risk.
The repository name does not match the package name and its README does not mention the package. That creates caution that the linked source may not clearly represent this package.
The repository has zero stars and zero forks, with one watcher. Popularity is not required for a healthy package, but these values provide no supporting evidence of community adoption or review.
The linked repository is not archived, which preserves the possibility of future maintenance. Its last push was about 10 years ago, so this does not offset the inactivity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0 | — | — |
guzzlehttp/guzzle Version ~5.3 | — | — |
aszone/fakeheaders Version ~0.1 | — | — |
aszone/proxyavenger Version ~0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.