Usable with caveats: the package is a stable, MIT-licensed client backed by an identifiable organization and is not deprecated or archived. However, its release history is sparse, there were no commits in the last three months, and the small repository has no tests or security policy.
62%
Total Score
67
100
78
80
The nine-file tree is coherent for a small API client and includes source files, examples, Composer metadata, and build configuration. Its minimal structure also confirms there is no packaged test suite to support maintenance confidence.
The package includes a substantial README, but has no tests or changelog in either the artifact or repository. GitHub Releases provide some release transparency, but the missing validation and history remain a maintenance gap.
Only two releases have been published across about 29 months, with a median interval of about 521 days and one release in the last 12 months. This indicates a slow maintenance cadence, although a recent release exists.
The repository recorded zero commits and zero active maintainers during the last three months. This is the clearest maintenance concern, even though the recent push and latest release show the project is not wholly abandoned.
There were no new or closed issues or pull requests in the last month, and no pull requests were merged. This gives little evidence of active community maintenance, though the issue count itself is unavailable.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.