This release is usable and reasonably transparent: it has a BSD-3-Clause license, a complete small package tree with tests, a matching repository, no install-time lifecycle scripts, and organization backing. However, it remains an early-stage v0 package with only five releases over roughly 596 days, just one release in the last 12 months, no commits or active maintainers in the last three months, minimal repository adoption, and no security policy or security scanning. The latest release and repository push are recent, but the overall evidence supports caution about maintenance continuity rather than a strong abandonment conclusion.
68%
Total Score
63
100
78
90
Only one registry account has publish access; the organization-backed repository makes this less concerning as publishing hygiene, but it still leaves limited visible release redundancy.
The package is about 596 days old but has only five releases and one release in the last 12 months, indicating a limited and potentially slowing release cadence despite the recent latest release.
The repository recorded zero commits and zero active maintainers in the last three months. Although the recent push and release are compensating evidence, the recent development activity remains thin.
There are no open issues or pull requests and no recent issue or PR activity. This is not inherently unhealthy for a small stable package, but it provides little evidence of an active maintenance community.
The repository has only one star and no forks, so external adoption and independent validation are very limited; popularity is supporting evidence rather than a verdict.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.15.2 || ^8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.