The package has tests, a matching MIT license, and no install-time scripts. Its single-maintainer project has had no commits or releases for about 9 years, leaving compatibility and support uncertain.
40%
Total Score
0
64
75
The package has had no releases in about 9 years, after five releases concentrated in May 2017. That strongly indicates abandonment for a framework integration that may need ongoing compatibility work.
There were zero commits and zero active maintainers in the last 3 months, consistent with the roughly 9-year release gap. This is the strongest evidence that maintenance capacity has disappeared.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no external adoption signal to compensate for inactivity.
The repository is not archived, which is a positive sign, but its last push was in May 2017 and does not offset the lack of subsequent activity.
The repository has no security policy. This is a transparency and reporting gap, though it is less important than the clearly inactive maintenance record.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.5 | — | — |
kalnoy/nestedset Version ^4.2 | — | — |
laravel/framework Version ^5.4 | — | — |
illuminate/support Version ^5.4 | — | — |
illuminate/database Version ^5.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.