Autogenerated Swagger
42%
Total Score
unhealthy
Risky: no releases or commits since February 2020, with a proprietary license and limited project activity.
The package has only three releases, all concentrated in February 2020, and none in the last 12 months despite being about 6 years old. This is strong evidence of abandonment risk for a dependency.
There were zero commits and zero active maintainers in the last 3 months, consistent with the package's release history. This materially increases the risk that defects and compatibility changes will go unaddressed.
A proprietary license is declared in the manifest, so the release is licensed, but it limits the transparency and reuse expected from an open-source dependency. No license file was detected to clarify the terms further.
The repository has zero stars and forks, with only four watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of broad review or community support.
Composer is used as a build tool, showing basic project structure, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than proof of a security problem.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.