There is no README, test suite, or security policy to support integration or ongoing review. The stable version and release notes help identify the intended release, but the repository’s minimal size and low activity provide little reassurance.
42%
Total Score
72
67
The package has only two releases, both published about five years ago, with no releases in the last 12 months. The repository is not archived, but the long inactivity materially raises abandonment risk.
The artifact and repository each contain only three files, including one source file, with no visible supporting documentation or tests. This may suit a very small client, but it leaves little evidence of maturity or maintainability.
The release has notes documenting an error in the request method, which is useful release-specific transparency. However, it has no README; tests and changelog absence are normal for published artifacts and are not penalized here.
The repository has zero stars and forks and only one watcher. Popularity is not required for a healthy package, but these counters provide no supporting evidence for a small, inactive project.
Composer is used for the build, which is appropriate for this package, but no security-scanning tooling is present. That limits evidence of ongoing supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/cache Version v1.12.1 | — | — |
guzzlehttp/guzzle Version v6.5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.