The README documents installation and usage, and the package has a direct repository match. Dependabot offers some maintenance structure, but ongoing support should not be expected.
10%
Total Score
0
57
50
Packagist marks the entire package as abandoned, with no replacement named; this is a direct warning against starting a new dependency on it.
The package has had no releases in about 3 years despite being more than 3 years old, indicating that its release activity has stopped.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the abandonment risk shown by the archived repository.
The source repository is archived and was last pushed about 3 years ago, so fixes and maintenance should not be expected.
The repository has no security policy, leaving no documented process for reporting or handling security issues; the abandoned status makes this gap more significant.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^2.4.3 | — | — |
guzzlehttp/guzzle Version ^7.5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.