This release is usable and has several healthy basics: it is an established MIT-licensed stable major release, is not deprecated, has no install-time lifecycle scripts, uses a modest declared dependency set, and is backed by a matching non-archived repository. However, maintenance and transparency are limited: the package has only three releases over about 3 years 8 months, no commits or active maintainers in the last 3 months, no tests, changelog, security policy, or security scanning, and essentially no repository adoption signals. The very small seven-file project and single-user ownership further increase bus-factor and abandonment risk, so this is a caution-level dependency rather than an obviously unfit one.
58%
Total Score
50
100
78
80
The complete seven-file tree is very small and transparent, but it contains only two source files and no test, CI, or security-related project structure, limiting evidence of engineering maturity.
A README is present, but the artifact and repository contain no tests or changelog. For a small library this is a genuine validation and change-history gap, with no provided repository evidence compensating for it.
The repository is owned by an individual user rather than an organization, and no broader project backing is shown. Combined with the single registry maintainer, this leaves a limited support and succession path.
The package is about 3 years 8 months old but has only 3 releases, with one release in the last 12 months and a median interval of about 667 days; this indicates a thin release history and limited demonstrated maintenance cadence.
The repository recorded 0 commits and 0 active maintainers during the last 3 months. This is the strongest maintenance concern because it shows no recent development activity, although the repository is not archived.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.