The package is documented and licensed, with repository tests and no install-time scripts. Its lone maintainer, one-star repository, and nearly four years without a release or commit make future maintenance uncertain.
42%
Total Score
33
100
78
83
The package has had 3 releases, all concentrated around its first publication on 19 October 2022, with no releases in the last 12 months. Nearly four years without a release is a substantial abandonment concern.
There were 0 commits and 0 active maintainers in the last 3 months, with the repository last pushed on 19 October 2022. This confirms that the release hiatus reflects absent source activity, not merely slower registry publishing.
Only one registry account has publish access. That is a limited publishing base and increases continuity risk when combined with the repository's lack of recent activity.
The repository is owned by an individual user rather than an organization, and no organizational backing is shown. This offers limited evidence of maintenance capacity when paired with the inactive history.
The repository has 1 star, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these numbers provide little evidence of an active user or contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.7 || ^2.0 | — | — |
psr/http-message Version ^1.0 | — | — |
guzzlehttp/guzzle Version ~6.3|~7.2|~7.3|~7.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.