Real saved report · no signup required

Guzzle

Packagist · guzzlehttp/guzzle

52.1

Health score /100

Very low issue resolution

Daily monitoring · 2026-11-09 10:05 UTC

Upstream repository: guzzle/guzzle ↗

Grades measure upstream repository maintenance health, not the security of a specific installed version. Security findings below concern the dependencies inspected in that repository; coverage may be incomplete.

Maintenance breakdown

Resolution

25/100

Very low issue resolution
Close rate: 0%. Most issues are never resolved.
Recent activity
29 issues closed in the last 30 days.
View evidence ↗

Risk Flags

93/100

Recent development
Last commit was 2 weeks ago.
View evidence ↗
Recent release
Latest release (8.3.1) was 2 weeks ago.
View evidence ↗

Backlog Health

100/100

Healthy backlog
Only 0% of open issues are older than 6 months.

Responsiveness

20/100

Very slow responsiveness
Median open issue age is 69 days. Issues appear to be neglected.
View evidence ↗

Score history

Scan completed (UTC)	Grade	Health score
2026-11-09 10:05	F	52.1
2026-11-08 09:05	F	52.1
2026-11-07 08:05	F	52.1
2026-11-06 07:05	F	52.1
2026-11-05 06:05	F	52.1
2026-11-04 05:05	F	52.1
2026-11-03 04:05	F	52.1
2026-11-02 03:05	F	52.1
2026-11-01 02:05	F	53.5
2026-10-31 01:05	F	53.5
2026-10-30 00:05	F	53.5
2026-10-28 23:05	F	53.5
2026-10-27 22:14	F	53.5
2026-10-26 21:05	F	53.5
2026-10-25 20:05	F	53.5
2026-10-24 19:05	F	53.5
2026-10-23 18:05	F	53.5
2026-10-22 17:05	F	53.5
2026-10-21 16:53	F	53.5

Security findings

guzzlehttp/psr7 ^3.2

guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation
medium · CVE-2026-48998
View advisory ↗
guzzlehttp/psr7: Host Confusion via Weak URI Host Validation
medium · CVE-2026-59882
View advisory ↗
guzzlehttp/psr7 has CRLF Injection via URI Host Component
medium · CVE-2026-49214
View advisory ↗
Improper Input Validation in guzzlehttp/psr7
medium · CVE-2022-24775
View advisory ↗
guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization
medium · CVE-2026-55766
View advisory ↗
Improper header name validation in guzzlehttp/psr7
medium · CVE-2023-29197
View advisory ↗

phpunit/phpunit ^9.6.34

PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling
unknown · CVE-2026-119193
View advisory ↗
PHPUnit: Argument injection via newline in PHP INI values forwarded to child processes
high · GHSA-mh6w-vxff-9wqp
View advisory ↗
PHPUnit has Argument injection via newline in PHP INI values that are forwarded to child processes
high · CVE-2026-41570
View advisory ↗
Code Injection in PHPUnit
critical · CVE-2017-9841
View advisory ↗
PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling
high · CVE-2026-24765
View advisory ↗

Healthier alternatives

No alternatives were returned by this scan.

Check your dependencies Check your dependencies

We check this public collection daily. You can scan your own dependencies for free.