The package includes tests, a useful README, a declared MIT license, and a small dependency set. Its release and repository activity are stale, while the source repository does not clearly identify this package.
54%
Total Score
50
100
79
75
The latest release was about 2 years 9 months ago, with no releases in the last 12 months; this is a meaningful maintenance concern for an API client.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the risk that maintenance has stalled.
The repository name does not match the package name and its README does not mention the package, so the linkage between this artifact and its source is unclear.
Composer is used for the build, but no security scanning tools are configured; that weakens repository hygiene, though it is not severe on its own.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.