Documentation, licensing, tests, and package ownership are solid. Long-term maintenance is the main concern, with no recent releases or commits and no published security policy.
55%
Total Score
50
100
83
75
There were zero commits and zero active maintainers in the last three months, consistent with maintenance having stopped after December 2022 and materially increasing abandonment risk.
The package has had only two releases, with none in the last 12 months; the latest release was published in December 2022, indicating substantially slowed maintenance.
There are no open issues or pull requests, and no recent issue or pull-request activity; this is compatible with a stable project but provides no evidence of ongoing support.
The repository has 12 stars and 2 forks, indicating a small user and contributor footprint; popularity is limited but not decisive for a focused integration package.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^1.22|^v2.0 | — | — |
php-http/httplug Version ^1.1|^2.0 | — | — |
php-http/message Version ^1.5 | — | — |
php-http/discovery Version ^1.2 | — | — |
php-http/client-implementation Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.