The dependency footprint is small, and the package is not deprecated. Consumer documentation and tests are absent, while the only release was 4 years 8 months ago and the repository has no recent commits; organization backing and an MIT declaration provide limited reassurance.
40%
Total Score
50
100
64
75
This package has only one release, published 4 years 8 months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk for a dependency.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap. No provided maintenance signal compensates for this inactivity.
The published package has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the absent README is a meaningful documentation gap for a PHP library consumers must integrate.
The repository has zero stars and forks, with only 3 watchers. Popularity is not required for health, but these counts provide no supporting evidence of adoption or community oversight.
Composer is used for the build, which fits the package ecosystem, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.