The package has a clear README, tests, an MIT license, and a stable release structure. Its single organization-backed maintainer and absent security policy add little protection against future maintenance problems.
15%
Total Score
63
100
61
75
Packagist marks the entire package as abandoned, with no replacement named. This is a direct warning that new dependencies should not be placed on it.
The package has 18 releases but none in the last 12 months; its latest release was over five years ago. Earlier regular releases do not compensate for the prolonged halt.
There were no commits and no active maintainers in the last three months, consistent with the archived repository and abandoned registry status.
The linked repository is archived, and its last push was over three years ago. Archived source indicates the project is no longer maintained for ongoing dependency needs.
No issues or pull requests were opened or merged in the last month, indicating no current development activity. This supports the maintenance concerns shown by the release and commit signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/psr7 Version ^1.4.2 | — | — |
php-http/httplug Version >=1.0 | — | — |
php-http/message Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
php-http/discovery Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.