Its small Composer dependency profile and MIT license support straightforward reuse. No security policy and no active release or issue process leave maintenance ownership unclear.
35%
Total Score
50
100
67
50
The package has had no release in nearly five years and has made no releases in the last 12 months, indicating likely abandonment despite its three historical releases.
The library includes no README, which makes integration harder for consumers; absent tests and changelog files are normal packaging practice and do not add concern here. A GitHub release exists for this version, providing some release traceability.
The repository is owned by an individual user rather than an organization. This does not prove poor health, but it offers limited evidence of institutional backing when combined with the dormant activity.
There are no open issues or pull requests and no recent activity, which is consistent with a dormant project rather than active maintenance.
The repository has zero stars and forks and only one watcher, providing little supporting evidence of adoption or community oversight.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.