Package Health

miljan9602/guzzle

Guzzle is a PHP HTTP client library

Latest 6.9.9PackagistPackagist

38%

Total Score

unhealthy

Risky: no releases or commits since November 2019, with high-confidence unpinned CI images

Health Score Breakdown

Release historydanger

The package has had no releases in the last 12 months, and its latest release was in November 2019. That long absence of updates is strong evidence of abandonment risk for a library dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no current maintenance activity.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no visible community support to compensate for the inactive maintenance record.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a secondary transparency gap alongside the stronger inactivity evidence.

Workflow auditcaution

All three analyzed action references use unpinned container images, with high-confidence high-severity findings; there are no untrusted checkouts or injection findings to offset this build-integrity concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Michael Dowling

Direct Dependencies

DependencyLast ReleaseScore
guzzlehttp/psr7
Version ^1.6.1
—
—
guzzlehttp/promises
Version ^1.0
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
14 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform