The package is clearly documented, licensed, tested, and free of install scripts. Its small single-user project has no recent activity, so long-term fixes and compatibility are uncertain.
43%
Total Score
50
64
83
The package has had only three releases, all between March and April 2019, with no release in more than seven years. This is strong evidence of abandonment risk despite the initially regular 21-day release interval.
One registry maintainer is consistent with a small user-owned project, but it leaves little visible publishing capacity if that person stops maintaining the package.
The repository is owned by an individual account rather than an organization, so there is no provided evidence of broader project backing to compensate for the single-maintainer base.
The repository has one open issue and no issues or pull requests were opened or closed in the last month, consistent with the absence of recent maintenance activity.
The repository has zero stars and forks and one watcher. Popularity is not required for health, but these counts provide no supporting community signal for a project that has been inactive for years.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.5 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.