The repository includes tests, a changelog, a security policy, and a matching package reference. MIT licensing and no install-time scripts reduce adoption friction, but the project has little visible community activity.
55%
Total Score
75
89
100
The package has had no release in about four years and five months, despite 19 releases overall; this is the strongest sign of stalled maintenance.
There were no new or closed issues or pull requests in the measured month, consistent with the broader lack of recent project activity.
The repository has zero stars, forks, and watchers, indicating little visible adoption or external validation; this is supporting caution rather than proof that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.6 | — | — |
myclabs/php-enum Version ^1.7 | — | — |
php-http/httplug Version ^2.1 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
paquettg/string-encode Version ~1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.