Its dependency set is small, and the registry does not mark it deprecated. The single publisher account and inconsistent version metadata leave little confidence in ongoing support.
38%
Total Score
50
100
50
The package has only four releases, with the latest on August 18, 2017 and none in the last 12 months. This long period without a release is a substantial abandonment concern.
Only one account has registry publishing access. This creates a thin maintenance base and increases the risk that support and releases stop if that person becomes inactive.
The assessed version is 1.11, while the collected registry profile reports 1.2 as the latest version. That inconsistency reduces confidence in release metadata and version provenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.0 | — | — |
symfony/psr-http-message-bridge Version 0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.