The package includes repository tests, a changelog, release notes, and a matching source tree. Its small maintainer base and lack of security tooling reduce confidence in ongoing support.
58%
Total Score
38
50
72
83
The package has five releases but none in the last five years, with the latest release on June 28, 2021. This is strong evidence of stalled maintenance for a library dependency.
There were no commits and no active maintainers in the last three months. Combined with the old latest release, this indicates a serious abandonment risk.
The package has six runtime dependencies, including PHP extensions and two libraries. This is a meaningful dependency surface but not excessive for an HTML DOM factory.
One registry maintainer is consistent with a user-owned project, but it leaves little publishing redundancy when combined with the absence of recent activity.
The registry namespace and repository are owned by the same individual account, confirming consistent ownership but not providing organizational backing or maintenance redundancy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.0||^7.0 | — | — |
masterminds/html5 Version ^2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.