Risky to adopt: the release is nearly a decade old, with no releases in the last 12 months and repository activity ending shortly after its initial launch. It has solid packaging basics and a matching source repository, but its README remains largely template text and there is no security policy.
42%
Total Score
75
100
61
90
The package is about 10 years old, has only 6 releases, and has had no release in the last 12 months; the latest release was in May 2016. This strongly suggests abandonment risk despite the short early release intervals.
The repository is not formally archived, but it was last pushed in May 2016, immediately after the latest release. The lack of archival status does not compensate for the observed lack of ongoing activity.
The artifact includes a README and changelog, while the repository includes tests and a changelog, which supports basic project transparency. The README content is partly uncustomized template text, limiting its usefulness to consumers.
There are no open issues or pull requests and no activity in the last month. While a clean issue tracker can be positive, here it is consistent with the repository's long-term inactivity rather than active maintenance.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive by itself, but these counters provide no supporting evidence of a healthy user or contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.