The package is small, clearly documented, and has a simple dependency footprint. Its maintenance history leaves compatibility and future-fix uncertainty, so pin this exact release if you adopt it.
40%
Total Score
25
100
69
83
Only one release exists, published in April 2016, with no releases in the last 12 months and roughly ten years since publication. This is strong evidence of abandonment risk.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and limited prospects for fixes.
One registry maintainer account is listed. Because this is a user-owned project rather than organization-backed, the narrow maintainer base provides limited continuity if that account becomes inactive.
The repository has zero stars and forks and only one watcher, providing little supporting evidence of broad review or active community use.
Composer build tooling is present, but no security scanning tools are configured. For this small and inactive project, that is a modest hygiene gap rather than the main adoption concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ~5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.