55%
Total Score
caution
Usable with caveats: no release or commit activity since March 2023.
The registry namespace and repository are owned by the same individual account. That gives clear ownership, but it also indicates a single-person project rather than organizational backing.
There has been only one release, published in March 2023, with no releases in roughly three and a half years. This materially raises maintenance and compatibility concerns.
The repository has had zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since its initial release.
Two issues and one pull request remain open, with no issues or pull requests closed in the last month. This suggests limited recent project attention.
Composer build tooling is present, but no security scanning tools are configured. This is a modest transparency and maintenance gap, not a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.