The repository has had no commits for about eight years, leaving open issues without recent activity. Its license, documentation, tests, and release structure are solid, but they do not offset the clear abandonment risk.
38%
Total Score
25
83
The last registry release was in December 2017, with no releases in the past 12 months. The earlier cadence was regular, but the long release gap is a strong sign of abandonment.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the last push being in July 2018. This materially increases the risk that defects and compatibility issues will remain unaddressed.
There are 23 open issues, with no new or closed issues and no pull-request activity in the past month. The lack of issue resolution reinforces the maintenance concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-http/message Version ^1.0 | — | — |
php-http/discovery Version ^1 | — | — |
php-http/client-common Version ^1 | — | — |
php-http/client-implementation Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.