The last release was over 10 years ago, and commit activity has been absent for more than 7 years. Documentation, tests, and licensing are present, but they do not offset abandonment.
12%
Total Score
0
57
100
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk beyond a deprecation limited to one release.
Only two releases were published, with the latest released over 10 years ago and none in the last 12 months. The long release gap indicates abandonment rather than a stable active project.
There were no commits or active maintainers in the last 3 months, consistent with the repository's archived state and the package's lack of recent releases.
The linked repository is archived, and its last push was more than 7 years ago. This strongly indicates that fixes and maintenance are unlikely.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ~1.0 | — | — |
guzzlehttp/guzzle Version ~6.0 | — | — |
guzzlehttp/promises Version ~1.0 | — | — |
mtdowling/jmespath.php Version ~2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.