Guzzle is a PHP HTTP client library
38%
Total Score
33
81
75
This package has made only one release, about 2 years 11 months ago, with no releases in the last 12 months. That unusually long period without a new release is a substantial maintenance concern.
The repository had zero commits and zero active maintainers in the last 3 months. Combined with the single historical release, this is strong evidence that maintenance has stopped.
The repository is owned by an individual user rather than an organization, so there is no provided evidence of organizational backing to compensate for the inactive contributor record.
There were no new or merged pull requests and no issue activity in the last month. This is consistent with the broader indication that the project is inactive.
The repository name matches the package, but its README does not mention the package name. This leaves some uncertainty about package-to-repository alignment, even though the name match is reassuring.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.9.1 || ^2.5.1 | — | — |
psr/http-client Version ^1.0 | — | — |
guzzlehttp/promises Version ^1.5.3 || ^2.0.1 | — | — |
symfony/deprecation-contracts Version ^2.2 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.