A single maintainer limits the visible maintenance capacity, and the package has only two releases in roughly six months. The artifact is well documented, tested, licensed, and free of install-time scripts, which offsets some adoption risk.
62%
Total Score
50
100
90
100
Only one registry account has publish access, which creates limited visible maintenance capacity and a higher bus-factor concern, even though registry access alone does not prove inactivity.
Only two releases have been published, both within the first few days, followed by roughly six months without a release; that makes ongoing maintenance uncertain for a young package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.