Tests, documentation, licensing, and a matching repository make the package transparent. Its small dependency surface and lack of install scripts reduce operational exposure, but ongoing maintenance capacity is limited.
56%
Total Score
67
100
75
75
Only two releases were published, both in January 2024, and there were no releases in the following 12 months. This indicates a very short release history and possible abandonment risk.
The package has one registry maintainer, which limits publishing redundancy and increases dependence on a single person. The matching user-owned repository provides some backing, but no broader maintainer base is shown.
The repository recorded zero commits and zero active maintainers in the last three months, with the last push in January 2024. That leaves current maintenance and compatibility work uncertain.
The repository has 1 star, 5 forks, and 1 watcher. Low adoption is supporting evidence of limited maturity, though popularity alone is not decisive for a small package.
Composer build tooling is present, but no security-scanning tools were detected. The missing automated security coverage is a modest hygiene concern rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=7 | — | — |
smi2/phpclickhouse Version ^1.4.2 | — | — |
illuminate/database Version >=7 | — | — |
the-tinderbox/clickhouse-builder Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.