The package is small but coherent, with a matching repository, MIT license, README, and no install scripts. Its two runtime dependencies keep the integration straightforward; pin this version if its webhook features fit.
55%
Total Score
67
100
78
83
One registry maintainer is consistent with a small user-owned project, but it also indicates limited publishing capacity if the project needs sustained maintenance.
The package has only two releases, with the latest published over three years ago and no releases in the last 12 months. This is the strongest evidence of slowing maintenance.
There are no open issues or pull requests and no issue or pull-request activity in the last month. Combined with the old last push, this supports a concern about inactivity.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these values provide little evidence of broad community support.
Composer build tooling is present, but no security scanning tools were detected. This is a transparency and hygiene gap, not evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3.1|^7.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.