The package includes tests, a substantial README, and an MIT declaration, with organization backing and no deprecation. Its maintenance evidence is weak: no commits or active maintainers in the last three months, and no security policy is present.
55%
Total Score
63
100
67
83
The latest release was over five years ago, with no releases in the last 12 months; this is a meaningful abandonment concern for an API SDK.
There were zero commits and zero active maintainers in the last three months, strongly reinforcing the release-history evidence of halted maintenance.
There are no open issues or pull requests and no recent activity. This is consistent with a quiet project but does not demonstrate ongoing maintenance.
The repository has zero stars and forks and only four watchers. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of a broad support community.
Composer is used for builds, but no security scanning tools are present. The missing scanning is a hygiene gap, not a standalone reason to reject the package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version >=6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.