Its stable version and modest dependency set are positives, but the repository could not be found for verification. Choose an actively maintained SDK instead.
8%
Total Score
100
33
Packagist marks the entire package as abandoned, with no replacement identified. That is a severe adoption and maintenance risk for a dependency.
The latest release was in September 2018, and there have been no releases in about eight years. This strongly indicates abandonment despite the earlier 15-release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3 | — | — |
tightenco/collect Version ^5.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.