Risky to adopt for new projects: the package has had no release or repository activity since September 2020. It is licensed, has source tests, and is not deprecated or archived, but the long abandonment period outweighs those positives.
43%
Total Score
0
70
100
The package has only three releases, all concentrated in September 2020, with no releases in the last 12 months. More than five years without a release is a substantial maintenance and compatibility risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having been effectively inactive since September 2020. This is the main reason adoption carries abandonment risk.
The repository has one star, one fork, and one watcher, indicating very limited external adoption or review. Popularity is only supporting evidence, but this provides little additional confidence for an already inactive package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.