keerill/guzzle-clockwork
The stable release is licensed, has repository tests, and includes release notes, so its basic packaging is clear. Its maintenance and workflow hygiene still warrant replacing it or pinning it only with close ownership of future compatibility.
42%
Total Score
50
81
Health Score Breakdown
The package has had no release in nearly three years and no releases in the last 12 months, which is a meaningful abandonment concern despite its six-release history.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.
The repository has zero stars, forks, and watchers, so there is little supporting evidence of community adoption or oversight.
All three action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script injection, which limits the risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hannes Van De Vreken |
| Kirill Popkov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 itsgoingd/clockwork Version ^5.0 | — | — |
illuminate/contracts Version ^10.0 | — | — |
hannesvdvreken/guzzle-profiler Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.