eightpoints/guzzle-wsse-plugin

Registry deprecationdanger

Packagist marks the entire package as abandoned and names eightpoints/guzzle-wsse-middleware as the replacement. Package-wide deprecation is a severe dependency risk even though the assessed version is stable.

Release historydanger

The latest release was about seven years ago, with no releases in the last 12 months. This strongly indicates abandonment for a package that may need compatibility or security maintenance.

Repo commit activitydanger

The repository had no commits and no active maintainers in the last three months, consistent with the long release gap. The non-archived repository does not compensate for the lack of observed maintenance.

Repo package mentioncaution

The linked repository is named guzzle-wsse-middleware rather than the package name and does not mention eightpoints/guzzle-wsse-plugin in its README. That makes package ownership and publication provenance less clear.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools were detected. For a dependency that has been inactive for years, the missing security tooling adds a transparency gap.