Unfit to use for a new dependency: the package is deprecated and its source repository is archived. It has clear licensing, documentation, and organization backing, but no releases or repository commits since 2021–2022, so ongoing compatibility and support cannot be expected.
15%
Total Score
50
57
100
Packagist marks the entire package as abandoned, with no replacement specified. This is a severe adoption risk because the release is explicitly withdrawn from active maintenance.
The package had only 3 releases, with the latest on June 14, 2021 and no releases in the last 12 months. This confirms that the package has been inactive for years rather than merely having a slow recent cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Together with the archived status, this provides direct evidence of abandonment.
The linked Criteo repository is archived, with its last push on January 4, 2022. Archival strongly indicates that compatibility fixes and maintenance are no longer expected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.