Risky to adopt: the package has had no release or repository activity for about six years and explicitly says it is still under development. Its small, transparent six-file structure and MIT license help, but they do not offset the strong abandonment concern.
32%
Total Score
0
64
83
There has been only one release, published about six years and nine months ago, with no releases in the last 12 months. This is strong evidence of an unmaintained package.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing prolonged inactivity. No newer activity is provided to compensate for this gap.
A README is present and the package has a GitHub release for this version, but the README explicitly warns that the package is still under development. The absence of tests and a changelog is normal for a published artifact, not a concern by itself.
The repository has 4 stars, 0 forks, and 1 watcher, indicating a very small user and contributor footprint. Popularity is supporting evidence rather than decisive, but it provides little reassurance alongside the inactivity.
The repository is not archived, which avoids an explicit abandonment marker, but its last push was about six years and nine months ago. The non-archived status only partly offsets the long inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.