Clear documentation, tests, and licensing make the package straightforward to evaluate and use. Maintenance has stopped, and its workflow leaves all seven action references unpinned; the lack of a security policy adds a smaller transparency concern.
52%
Total Score
0
100
83
75
The package has 30 releases but none in the last 12 months, with the latest release on October 19, 2023; this indicates prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's stated maintenance-only status and raising abandonment risk.
The linked repository has no security policy, reducing transparency about vulnerability reporting and response for a package that sends analytics data.
The single workflow was fully analyzed and has no dangerous triggers or audit findings, but all seven action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.