Package Health/hannesvdvreken/guzzle-clockwork

hannesvdvreken/guzzle-clockwork

The package is small and focused, with a clean dependency setup and no install-time scripts. Its source has tests and release notes, but ongoing maintenance appears limited; pin this release only if its older Clockwork integration fits your stack.

Latest 4.0.0-RC1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 13 releases over roughly 12 years, but none in the last 12 months and the latest registry release was in September 2021. This materially raises abandonment and compatibility risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this suggests limited ongoing maintenance capacity.

Repo tooling

Composer is used for the build, but no security scanning tool was detected. That is a transparency and hygiene gap, though it is not severe enough to make the release unfit on its own.

Security policy

The repository has no security policy. For a small middleware package this is a modest disclosure and maintenance gap rather than evidence that the release is unsafe.

Version stability

The assessed release is 4.0.0-RC1, a prerelease rather than a final stable release. Its prerelease status is partly offset by the package's mostly stable release history, but it still warrants caution for production dependencies.