Repository tests and organization ownership provide some reassurance. However, the release has seen no activity for over three years, and no license was found, making long-term maintenance and adoption risky.
38%
Total Score
50
100
63
75
The package is over three years old but has had no releases in the last 12 months; its three releases were concentrated on the first day, indicating a stalled release history.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the last push being over three years ago and raising abandonment risk.
No declared license or license file was found in the package or repository, leaving the legal terms for reuse unclear.
The published artifact has no README, but the repository does contain tests, which provides some validation for this library despite the documentation gap.
The repository has zero stars and forks and only two watchers, offering little evidence of external adoption or community support.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.