The package has a clear README, tests, an MIT declaration, and a matching repository. Its single-maintainer project has had no commits or releases for about three years and has no security policy, so ongoing support is uncertain.
42%
Total Score
33
100
78
83
The six releases were all published within roughly seven hours in June 2023, with no release in the following three years. That strongly suggests the package is no longer actively maintained.
There were no commits and no active maintainers in the last three months, consistent with the roughly three-year gap since the last push. This is strong evidence of abandonment risk.
Only one registry account has publish access. Because the linked project is user-owned rather than organization-backed, this represents a thin maintenance base.
The repository is owned by an individual account, not an organization. Combined with one registry maintainer, this indicates limited visible project backing.
The repository has three stars, zero forks, and one watcher. This limited adoption is supporting evidence of a small project, not a health verdict by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version >=2.10 | — | — |
guzzlehttp/guzzle Version >=7.0.1 | — | — |
laravel/framework Version >=8.0 | — | — |
illuminate/support Version >=8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.