The MIT license, matching repository, and repository tests provide a solid base. However, the package has had no release in nearly five years and no recent commits, while all 10 workflow actions are unpinned.
46%
Total Score
25
50
75
88
Although the package has 18 releases, none were published in the last 12 months and the latest release was in November 2021, nearly five years ago. This is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence of likely abandonment.
Four runtime dependencies, including Laravel components and the Segment analytics client, create a meaningful compatibility surface but not an excessive dependency burden for this integration package.
The repository is owned by an individual user rather than an organization, so there is no visible organizational backing to compensate for the lack of recent activity.
Composer build tooling is present, but no security scanning tools were detected. This is a hygiene gap, partly offset by the repository's small scope and test suite.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ^5.5 || ^6.0 || ^7.0 || ^8.0 | — | — |
illuminate/support Version ^5.5 || ^6.0 || ^7.0 || ^8.0 | — | — |
segmentio/analytics-php Version ~1.5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.