It includes tests, release notes, and a clear license. The repository is not archived and the package has a manageable dependency set, but future fixes and support are uncertain.
38%
Total Score
50
100
78
50
Only one registry account has publish access, and the project backing identifies a user-owned repository rather than an organization. This thin publishing base adds some continuity risk alongside the inactive repository.
The package includes a README, tests, and a GitHub release with notes for this version. The README also states that the project is no longer maintained, which materially offsets the otherwise useful documentation.
Only three releases exist since August 2021, with no release in the past 12 months and a median interval of about 650 days. This indicates a very slow maintenance cycle for an SDK.
The repository recorded zero commits and zero active maintainers in the past three months. Together with the maintenance warning in the README, this raises a substantial abandonment concern.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible community activity provides no compensating adoption signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.