70%
Total Score
caution
Usable with caveats: maintenance has paused for three months and the sole workflow uses an unpinned action.
The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the absence of continuing development warrants caution about maintenance responsiveness.
No repository security policy was found. This is a transparency and vulnerability-reporting gap, though it is a moderate hygiene concern rather than evidence of abandonment by itself.
All workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, the sole workflow uses one unpinned action, leaving a modest build-integrity gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.4.1|^2.0 | — | — |
guzzlehttp/guzzle Version ^5.3.1|^6.2|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.