MIT licensing and a small dependency surface make the package straightforward to integrate. The repository is not archived, but its limited documentation and solo ownership leave maintenance risk to manage.
58%
Total Score
50
100
79
50
The latest release was published in October 2023, with no releases in the following 12 months of the collected history; this indicates a long maintenance gap for a library dependency.
Registry publishing is controlled by one maintainer, and the repository is owned by a user account rather than an organization, leaving a thin visible maintenance base.
The package has no README, which is a minor consumer-facing gap for an SDK; missing tests and a changelog are expected in the published artifact and are not concerns here.
The repository has no published security policy, reducing transparency for reporting vulnerabilities; this is a hygiene concern rather than evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.