The repository includes tests, a changelog, a README, a license, and a security policy, while the package has no install-time scripts. Its single release and complete lack of commits or contributor activity since publication make future fixes and support uncertain.
48%
Total Score
50
50
80
100
This package has only one release, published about 2 years and 11 months ago, with no releases in the last 12 months. That makes ongoing maintenance uncertain despite the mature-looking version number.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the absence of recent releases. The repository is not archived, but there is no observed recent maintenance capacity.
The package declares 9 runtime dependencies, including several extensions and HTTP-related libraries. This is a meaningful dependency surface but not, by itself, evidence that the release is unsafe to depend on.
There were no new or merged pull requests and no new or closed issues in the last month. This supports the broader maintenance concern, although the open issue count is unknown.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.6 | — | — |
myclabs/php-enum Version ^1.7 | — | — |
php-http/httplug Version ^2.1 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
paquettg/string-encode Version ~1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.