Usable with caveats: this is a small, coherent client with a clear MIT license and organization-backed repository, but it has had no release or commit activity since March 2022. Depend on it only if the API remains stable and you can accept maintaining it yourself.
58%
Total Score
75
100
81
88
The package has only one release, published about 4 years 6 months ago, with no releases in the last 12 months. That indicates limited maturity evidence and substantial abandonment risk.
The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the lack of releases since March 2022. The repository is not archived, but there is no observed recent maintenance.
The repository has 1 star, 0 forks, and 2 watchers, providing little community evidence or outside support. Low popularity is supporting evidence rather than a decisive problem for a small client library.
Composer is used as the build tool, providing expected ecosystem tooling, but no security scanning tools are configured. For this small package that is a hygiene gap rather than evidence of unsafe behavior.
The repository has no published security policy. This reduces transparency for reporting vulnerabilities, although the package's small scope and lack of observed dangerous workflows limit the significance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.