Risky to adopt: this package has had no release or repository activity for about 8 years and 10 months, with only one release ever. It is licensed, documented, and not deprecated or archived, but its minimal project activity makes ongoing compatibility and maintenance uncertain.
35%
Total Score
25
100
72
75
The package has only one release, published about 8 years and 10 months ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a Laravel integration.
There were no commits and no active maintainers in the last three months, consistent with the package's long-standing lack of releases and indicating little current maintenance capacity.
The package and repository are backed by the same individual account rather than an organization. That is coherent ownership, but it offers limited visible continuity if the maintainer stops working on the project.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide no meaningful community-maintenance cushion.
Composer is used as the build tool, which is appropriate for this PHP package, but no security scanning tools are configured. The missing scanning is a transparency gap, though it is less important than the long inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aws/aws-sdk-php Version ~3.3 | — | — |
illuminate/support Version ~5.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.