It includes a README, tests, an MIT declaration, and no install-time scripts. Its small, single-owner footprint and absent security policy warrant care for long-lived use.
55%
Total Score
50
100
83
75
Only one registry maintainer is listed, which creates a limited publishing and support base for a package intended as an API client.
The repository is owned by an individual user rather than an organization, so there is no observed organizational backing to compensate for the thin maintainer base.
The package is only about four months old and its four releases were concentrated within about two days, providing limited evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers during the past three months, leaving current maintenance capacity uncertain.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the limited activity history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.