随机的从 Unsplash 网站下载图片到本地
42%
Total Score
unhealthy
Risky: the package has had no release or source update for over seven years after only two releases.
The package has only two releases, both in 2018, and has had no release in over seven years. This is strong evidence of abandonment risk for a dependency.
The repository has one star and no forks, providing little evidence of broad review or community support. Popularity is supporting evidence, so this adds only a modest concern.
Composer is used as the build tool, but no security scanning tools are configured. For a small package this is a hygiene gap rather than a standalone reason to reject it.
The repository is not archived, but it was last pushed over seven years ago, reinforcing the maintenance concern shown by the release history.
The repository has no security policy. This weakens vulnerability-reporting transparency, though the small scope and long inactivity make it a secondary concern.
We didn't find any vulnerabilities for this package.
| Version | Published | Vulnerabilities |
|---|---|---|
| v1.1.0 | 25 Sept 2018 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| v1.0.0 | 25 Sept 2018 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.