The package has a small runtime dependency set and no install-time scripts. Its repository could not be found, and the available package metadata provides little evidence of ongoing support.
38%
Total Score
50
100
38
100
No declared license, license file, or detected license was found. That creates a material legal and adoption risk for downstream projects.
The last release was over six years ago, with no releases in the past 12 months. This is strong evidence of abandonment risk for a package that may require compatibility maintenance.
Only one registry publishing maintainer is listed, leaving little visible maintenance capacity or succession resilience.
The published artifact has no README, while tests and a changelog are not expected to be packaged and are therefore not concerns here. The missing consumer documentation is a minor usability gap for a library.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.