The MIT license, clear README, matching repository, and small dependency surface improve transparency. The project has little remaining maintenance or security-process evidence, so pinning this release creates substantial adoption risk.
12%
Total Score
0
100
50
83
Packagist marks the entire package as abandoned, with no replacement package supplied. This is a direct warning against taking a new dependency on it.
This is the only release, published about 6 years ago, with no releases in the last 12 months. That provides strong evidence of abandonment for a package still marked alpha.
There were no commits and no active maintainers in the last 3 months, consistent with the repository being archived and the lack of recent releases.
The linked repository is archived and was last pushed about 4 years ago. An archived source project is a severe maintenance and compatibility risk.
The repository has 5 stars, 7 forks, and 1 watcher. This indicates limited adoption, but popularity is supporting evidence and does not independently determine package health.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.