Documentation and licensing are clear, and the source repository includes tests and a changelog. The small project footprint, absent security scanning, and unpinned workflow actions add little confidence for future maintenance.
12%
Total Score
50
100
61
67
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe warning against taking a new dependency on this release.
The repository had 0 commits and 0 active maintainers in the last 3 months. Combined with the abandoned package and archived repository, this indicates a strong abandonment risk.
The linked repository is archived, so its source is no longer maintained through the normal project workflow. Its last push was on June 20, 2025, which does not compensate for the archived state.
There were 5 releases over roughly 3 years, but none in the last 12 months. The stable history is outweighed by the current lack of releases and the package's abandoned status.
The repository has 2 stars, 1 fork, and 1 watcher, indicating a very small project footprint. Popularity is only supporting evidence, but this provides little evidence of a broad maintenance community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^11.0 || ^12.0 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
illuminate/support Version ^11.0 || ^12.0 | — | — |
vonage/client-core Version ^4.1 | — | — |
spatie/laravel-webhook-client Version ^3.1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.