Documentation and licensing are in place, and installation has no lifecycle scripts. The source project has shown no commits or release activity for more than five years, with no security policy or scanning configured.
43%
Total Score
50
100
67
88
The latest release was published in January 2021, and there have been no releases in the last 12 months. That long release gap is strong evidence of abandonment risk for an SDK.
The repository recorded zero commits and zero active maintainers over the last three months. Combined with the old last push, this is strong evidence that maintenance has stopped.
There were no new or closed issues or pull requests in the last month, and no pull requests were merged. This is consistent with an inactive project, although open issue count is unknown.
The repository name matches the package name, reducing the risk that the package is piggy-backing on an unrelated project. The README does not mention the package name, which is a minor transparency gap.
The linked repository has zero stars, forks, and watchers, providing no community adoption evidence to compensate for its inactive maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ~7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.