MIT licensing, tests, and no install-time scripts make the package straightforward to inspect and use. The repository could not be found, and no release has appeared since September 2021, so maintenance and provenance remain weak.
43%
Total Score
50
100
60
100
Only three releases have been published since October 2015, with no release in nearly five years and none in the last 12 months; this is strong evidence of weak maintenance.
A single registry maintainer provides limited visible publishing capacity, increasing continuity risk when combined with the sparse release history.
Bundled tests are a small positive, but the library has no README to help consumers integrate it; the missing changelog is not a concern for a published artifact.
The current version is a non-prerelease 0.1.2, but it remains below a stable major version, leaving maturity less established.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.