It has a clear MIT license, a matching repository, and a usable README. No security policy and no recent project activity leave maintenance and response capacity uncertain.
42%
Total Score
0
67
83
The package has only two releases, with the latest published in May 2019 and none in the last seven years. This is strong evidence of abandonment for a library dependency.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last push being in May 2019, this indicates effectively halted maintenance.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a standalone adoption blocker.
The repository is not archived, which is a positive counter-signal, but it was last pushed in May 2019 and therefore does not offset the long inactivity period.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This matters more for a package that sends analytics data from applications.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.