The package has a clear README, a small dependency set, and no install-time scripts. Its source remains unarchived and the release has notes, but formal licensing is absent and there is little evidence of ongoing maintenance.
48%
Total Score
100
50
75
No registry declaration, recognized license, or license file was found in the package or repository, leaving the legal terms for reuse unclear.
Only two releases were published, both in 2018, with no releases in the last 12 months; this is strong evidence of an effectively inactive package.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy small package, but these values provide no supporting adoption evidence.
The linked repository is not archived, which is a positive counterpoint to the old release history, although its last push was still in August 2018.
The repository has no security policy. This is a transparency and maintenance gap, though it is less significant than the absence of recent releases.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version 6.3.* | — | — |
magento/framework Version >100.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.