The package is clearly identified, MIT-licensed, and includes tests and useful documentation. Its small dependency footprint and lack of install scripts reduce operational concerns, but they do not offset its limited project maturity.
35%
Total Score
25
100
79
75
Only one release exists, published in May 2014, with no releases in the last 12 months; this is strong evidence of abandonment for a dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package's long-standing lack of releases.
There has been no issue or pull request activity in the last month. With no recent release or commit activity to compensate, this supports a maintenance concern.
The repository has 1 star and no forks, providing little supporting evidence of broad community adoption or external maintenance capacity.
The repository has no security policy. This is a transparency and response-process gap, though it is secondary to the much more significant maintenance evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ~4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.