Healthy and reasonable to adopt. It has frequent recent releases, active organizational ownership, tests, clear documentation, and no deprecation or archival concerns. Maintenance is concentrated in one recent contributor, and the repository lacks a security policy and explicit workflow permissions.
82%
Total Score
88
100
94
80
All five recent commits came from one contributor, creating a real continuity risk. Organizational ownership provides some ability to hand maintenance off, but no second active contributor is shown.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and preventive-maintenance gap.
The repository has no security policy, so users lack a documented channel and process for reporting vulnerabilities.
The only workflow lacks top-level token permissions. No write permissions were detected, but explicit least-privilege configuration is absent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.