The package has a clear README, tests, MIT licensing, and no install-time scripts. Its small user base and missing security policy leave less evidence of ongoing support.
43%
Total Score
33
100
69
83
The latest release was on March 28, 2023, and there have been no releases in the last three years, indicating the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the three months before collection, reinforcing the prolonged maintenance gap.
One registry account publishes the package. Because the repository is user-owned rather than organization-backed, this indicates a thin maintainer base, though activity evidence is more important here.
The linked repository is owned by an individual account, so there is no observed organizational backing to compensate for the prolonged inactivity.
The repository has zero stars, one fork, and one watcher, providing little evidence of a broad user or maintainer community to support the package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.