The package includes a usable README, tests, and changelog, and has no install-time scripts. Its two runtime dependencies are explicit, but the repository could not be found, limiting verification.
18%
Total Score
100
50
100
Packagist marks the entire package as abandoned, with no meaningful replacement identified. This is a severe adoption risk even though the release itself is not separately withdrawn.
The package was last released in May 2021 and has had no releases in over five years, indicating prolonged inactivity despite a five-release history.
The manifest declares Unlicense while the artifact license file is detected as MIT. The release is licensed, but the mismatch creates avoidable legal and provenance uncertainty.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tebru/gson-php Version ^0.7.4 | — | — |
guzzlehttp/guzzle Version ^7.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.