The small codebase, MIT license, and clear README make integration straightforward. Its single release and no recent repository activity leave maintenance uncertain, with no security policy or scanning.
56%
Total Score
75
100
86
83
This package has made only one release, v1.0.0, on May 28, 2025, with no releases in the last 12 months. That limited history makes ongoing maintenance uncertain.
The repository recorded zero commits and zero active maintainers in the last three months. Its last push was in February 2025, before the assessed release, which weakens evidence of active upkeep.
Composer is used for the build, which fits the package, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy. For a small SDK this is a hygiene gap, but it does not by itself indicate that the release is unsafe to depend on.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.