Package Health

guzzlehttp/promises

Healthy and suitable to depend on. It has a long release history, recent releases, active source maintenance, strong documentation, and an organization-backed repository; maintenance is currently concentrated in one contributor.

Latest 3.0.2PackagistPackagist

88%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

88

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Repo bus factorcaution

All 19 commits in the last three months came from one contributor, creating a real continuity risk. The risk is partly offset because the repository is owned by an organization that can potentially hand maintenance to another contributor.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security scanning tools were detected. The established build tooling is positive, while the missing scanning coverage is a modest transparency gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Graham Campbell
Michael Dowling
Tobias Nyholm
Tobias Schultze

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 month ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform