The package includes substantial documentation, tests, a changelog, and a simple dependency profile. It lacks a security policy and scanning, so future maintenance and vulnerability response are uncertain.
52%
Total Score
38
100
78
83
This is a single-release package, with no releases in roughly 3 years and 10 months. That strongly limits evidence of ongoing maintenance, although the repository is not archived and the release is not deprecated.
There were zero commits and zero active maintainers in the last 3 months. Combined with the last push in November 2022, this is strong evidence that maintenance has stopped.
Only one registry maintainer entry is listed, which leaves limited visible publishing redundancy. The repository's tests and documentation provide some compensation, but not evidence of a broader active maintainer base.
The repository is owned by an individual user rather than an organization, so the single registry maintainer entry has no visible organizational backing to compensate for the inactive project.
There were no new or merged pull requests and no issue activity in the last month. This is consistent with an inactive project, though the open-issues count is unknown.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ~6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.