The stable major version, included tests, release notes, and small dependency surface support adoption. A single publisher and limited security process leave less operational cover if the API changes.
58%
Total Score
50
100
80
50
The package has had no releases in over three years, despite a previously regular median interval of about 28 days. This is the clearest sign that maintenance may have stalled.
Only one user account has registry publishing access, leaving little visible publishing redundancy. The repository is also user-owned rather than organization-backed.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history concern rather than showing ongoing maintenance.
The repository has no security policy, reducing transparency about how dependency or vulnerability reports would be handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.5 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.