Risky to adopt: this package has had no release or repository activity for nearly 13 years, so compatibility and maintenance are uncertain. It is licensed and includes basic tests and a changelog, but the project is effectively dormant.
38%
Total Score
0
67
50
This is a single-release package, with its only release published nearly 13 years ago and no releases in the last 12 months. That is strong evidence of abandonment risk, though the package is not marked deprecated.
The repository recorded no commits and no active maintainers in the last three months, consistent with the nearly 13-year-old release history. This materially lowers confidence that defects or compatibility issues will be addressed.
The repository name matches the package, supporting the repository link, but the package name is not mentioned in the README. This leaves some uncertainty about how clearly the repository documents this package.
The repository has only 1 star, 0 forks, and 2 watchers. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of a broad active user or contributor base.
The repository has no security policy. For a dormant package this is a genuine transparency and vulnerability-reporting gap, although it is less severe than the absence of maintenance itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzle/guzzle Version 3.7.* | — | — |
illuminate/support Version 4.0.* | — | — |
cviebrock/guzzle-stripbom-plugin Version 0.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.