This is a long-established, stable-major package with an MIT license, a matching organization-owned repository, a documented source tree, and comprehensive repository tests. It is not deprecated or archived, has no install-time lifecycle scripts, and its dependency profile is modest. However, maintenance appears thin: only one release occurred in the last 12 months and there were no commits or active maintainers in the last 3 months, while repository popularity and issue activity are low. The absence of security scanning and a security policy also reduces transparency. The package is usable, but adopters should verify that the API remains maintained for their needs.
68%
Total Score
63
100
83
90
The repository recorded zero commits and zero active maintainers in the last 3 months, a meaningful abandonment and maintenance-capacity concern.
The package is mature at 3660 days old with 13 releases, but only 1 release in the last 12 months indicates slow ongoing release activity.
There are two open issues but no issues or pull requests were created or closed in the last month, suggesting limited current project activity.
Four stars, two forks, and four watchers indicate a small user and contributor footprint; popularity is supporting evidence rather than a decisive health verdict.
Composer build tooling is present, but no security-scanning tools are configured, leaving a security-transparency gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version >=6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.