Guzzle is a PHP HTTP client library
38%
Total Score
unhealthy
Risky: no releases or commits since November 2019, with high-confidence unpinned CI images
The package has had no releases in the last 12 months, and its latest release was in November 2019. That long absence of updates is strong evidence of abandonment risk for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no current maintenance activity.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no visible community support to compensate for the inactive maintenance record.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a secondary transparency gap alongside the stronger inactivity evidence.
All three analyzed action references use unpinned container images, with high-confidence high-severity findings; there are no untrusted checkouts or injection findings to offset this build-integrity concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.6.1 | — | — |
guzzlehttp/promises Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.