The package offers very little documentation or project process for consumers. Its MIT license and lack of install scripts reduce adoption risk, but do not offset the long silence and uncertain repository relationship.
38%
Total Score
50
67
75
The package includes a README, but it is only 18 characters long and provides almost no consumer guidance. The absence of tests and a changelog is normal for published artifacts and is not counted against it.
This is the only release, published nearly ten years ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.
The repository has recorded no commits and no active maintainers in the last three months, consistent with a project that has been inactive since its initial release.
The repository name does not match the package name, and its README does not mention the package. That weakens confidence that the linked source repository actually belongs to this release.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of community adoption or review.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ~6.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.