Healthy and suitable to depend on. It has a long release history, frequent recent releases, active contributors, a maintained organization-backed repository, and strong documentation; workflow permissions and the lack of a security policy are the main caveats.
88%
Total Score
100
100
94
80
Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap, not a standalone dependency-health failure.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package that performs web crawling.
Three workflows omit top-level permissions and one workflow grants top-level write access, indicating weaker-than-ideal GitHub Actions hardening despite the absence of other dangerous workflow patterns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^2.6.3 || ^3.0 | — | — |
psr/http-client Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^7.8.2 || ^8.0 | — | — |
spatie/robots-txt Version ^2.0 | — | — |
symfony/dom-crawler Version ^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.