The package is licensed and includes a substantial README, changelog, and release notes. Its final release explicitly ends maintenance and security fixes, while recent commit activity is absent.
10%
Total Score
50
100
57
75
The package has a README, changelog, and release notes for this version, but those notes explicitly call v7.1.0 the final release and state that maintenance and security fixes have ended.
The project has existed for about 7 years with 16 releases, but only one release appeared in the last 12 months and it is explicitly the final release.
There were no commits and no active maintainers in the last 3 months, consistent with the declared end of maintenance rather than an actively supported dependency.
The registry does not mark the package deprecated, which is a limited positive, but the release documentation separately states that the project is abandoned and will receive no further fixes.
The repository was not marked archived at collection time, but its latest push coincides with the final release and the package documentation says the repository is read-only.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-http/client-common Version ^1.9 || ^2.0 | — | — |
jane-php/open-api-runtime Version ^7.6 | — | — |
php-http/client-implementation Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.