The release is clearly licensed and has a matching source repository. Limited activity and a one-person project make long-term support less certain.
68%
Total Score
50
100
88
83
Only one account has registry publishing access. Because the project is backed by an individual user rather than an organization, this leaves limited visible publishing redundancy.
The package has seven releases since December 2022 and one release in the last 12 months, but its roughly 135-day median interval indicates a modest maintenance pace.
The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance warning, although the release itself was published on November 25, 2025.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. That is a modest hygiene gap rather than evidence of abandonment.
The repository has no security policy. This does not make the package unsafe by itself, but it reduces transparency about how security reports are handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^9.0 || ^10.0 || ^11.0 || ^12.0 | — | — |
alireaza/php-form-data Version 1.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.