The dependency list is small and installation has no lifecycle scripts. Documentation is minimal, and the project has no security policy or automated security scanning.
43%
Total Score
50
100
67
75
The package has had no release in about 2 years and 8 months; all 11 releases were concentrated in January 2024. That long silence is a substantial abandonment concern.
The artifact includes a README, but it is only 121 characters and contains installation instructions without usage guidance. Missing tests and changelog files are normal for published artifacts and are not counted against it.
The repository is owned by an individual rather than an organization, so the single registry maintainer does not benefit from visible organizational backing. This is consistent with a small project but provides limited maintenance capacity.
The repository has no open issues or pull requests and recorded no issue or pull-request activity in the last month. This provides no evidence of an active support or maintenance community.
The repository has 0 stars and 0 forks, with 1 watcher. Low visibility is only supporting evidence, but it offers little external assurance for a package already showing inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ~7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.