Usable with caveats: the package is licensed, tested, clearly tied to its repository, and has no deprecation or workflow-risk indicators. However, it has had no release or commit activity for over three years, with no recent issue resolution and no published security policy.
58%
Total Score
50
79
88
The repository recorded zero commits and zero active maintainers in the last three months. With the latest release also more than three years old, this is the main abandonment risk.
The package has 10 releases since April 2017, but its latest release was in February 2023 and there were no releases in the last 12 months. This indicates materially slowed maintenance despite a stable release history.
There are four open issues and one open pull request, but none were opened or closed and no pull requests were merged in the last month. This suggests limited current responsiveness.
The project uses Composer, but no security-scanning tools were detected. For a small package this is a meaningful transparency gap, though it is not by itself evidence that the package is unsafe.
The linked repository is not archived, so it remains available for maintenance. Its last push was in February 2023, which is consistent with the separate evidence of inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
codeception/codeception Version >=2.0 <6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.