Risky to adopt: the last release was nearly 11 years ago and the repository has had no commits for nearly 10 years. It is clearly packaged and licensed, but its Laravel 4 target and prolonged inactivity make compatibility and future maintenance unlikely.
38%
Total Score
38
100
72
88
The package has only two releases, both dating to November 2015, with no release in nearly 11 years. This is strong evidence of abandonment for a framework integration.
The repository recorded no commits and no active maintainers in the last three months, consistent with the last push being nearly 10 years ago. The inactive repository outweighs its non-archived status.
Only one registry publishing account is listed. Because the repository is individually owned, this is not unexpected, but it leaves little visible redundancy for future maintenance.
The package and repository are backed by the same individual account rather than an organization. That is consistent ownership, but it provides limited maintainer capacity for an inactive project.
There are no open issues or pull requests and no recent issue or pull-request activity. While this avoids an unresolved backlog, it also shows no community maintenance signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version 5.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.