MIT licensing, tests, a changelog, and a repository that matches the package make adoption straightforward. The package is stable and not deprecated, but recent maintenance activity is limited.
61%
Total Score
67
100
83
83
The latest release was on March 7, 2025, and there were no releases in the following 12 months of the measured period. This indicates a meaningful maintenance slowdown, though the package has six releases and a stable current version.
The repository recorded zero commits and zero active maintainers in the last 3 months. This corroborates the lack of recent releases and raises abandonment risk.
There are no open issues or pull requests and no recent issue or pull-request activity. This is compatible with a quiet stable project, but it also offers little evidence of active maintenance.
The repository has no stars or forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little external validation.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap, not evidence that the package is unsafe by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0.1 | — | — |
symfony/http-foundation Version ~2.3 || ~3.0 || ~4.0 || ~5.0 || ~6.0 || ~7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.