The MIT license, README, and package-to-repository match improve transparency. The release notes warn that this version lacks error handling, logging, testing, and production readiness.
20%
Total Score
38
100
56
83
The package has only two releases, with the latest published over 12 years ago and none in the last 12 months, indicating severe abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months; together with the last push over 12 years ago, this indicates a dormant project.
The assessed v0.1.1 release is not a stable-major release, and its own notes describe it as unstable and unsuitable for production.
Only one registry account has publish access. That is not proof of weak project backing, but it leaves little visible publishing redundancy for this independently owned project.
A substantial README and release notes are present, but the source repository has no tests, while the release notes explicitly say testing and proper documentation are absent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ~4.0 | — | — |
illuminate/support Version 4.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.