The release has a clear MIT license, a useful README, explicit dependencies, and repository tests. Its single-user ownership, zero-star repository, and absent security policy provide little evidence of ongoing maintenance or review.
38%
Total Score
33
100
63
75
Although the package has eight releases, its latest release was about nine years ago and there were no releases in the last 12 months, indicating severe maintenance stagnation.
There were no commits and no active maintainers in the last three months, consistent with the long gap since the last repository push.
The repository is not formally archived, but it was last pushed about nine years ago, so the unarchived status provides little practical evidence of active maintenance.
Only one registry publishing account is listed. That is a thin publishing base for a package with no recent activity, though it does not by itself prove abandonment.
The repository is owned by an individual user rather than an organization, so the single-maintainer context does not benefit from visible organizational backing.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ~1.20 | — | — |
symfony/console Version ~3.2 | — | — |
symfony/process Version ~3.2 | — | — |
facebook/webdriver Version ~1.0 | — | — |
illuminate/support Version ~5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.