This release appears suitable for use, with strong registry evidence of active development: 14 releases in the last 12 months, a stable non-prerelease version, no deprecation, and a recent median release interval of about 6 days. The artifact is substantial, documented, includes tests, has no install-time lifecycle scripts, and uses a manageable runtime dependency set. Transparency is weaker because no source repository is declared, leaving repository maintenance, provenance, and contributor activity unverifiable; the single registry maintainer also provides limited visible ownership context, though registry access does not establish actual maintenance activity. Overall, this is a healthy but not fully transparent dependency.
78%
Total Score
100
100
100
All health scores are okay.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.7 || ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.