55%
Total Score
caution
Usable with caveats: no release or commit activity for about three years.
Only five releases exist, and none were published in the last 12 months; the latest release was about three years ago. This is meaningful abandonment risk for a package still presented as alpha.
There were zero commits and zero active maintainers in the last three months, consistent with the roughly three-year release gap. This substantially lowers confidence in ongoing maintenance.
The artifact and repository contain license files, but the manifest declares Apache-2.0 while the detected text also includes CC-BY-4.0. The mismatch warrants checking which files or components carry the additional license.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less severe than the clear inactivity signals.
The assessed release is a prerelease alpha, so its API and behavior may still change. That is partly consistent with the package's early release history but remains a real adoption caveat.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
area17/twill Version ^3.0|3.x-dev | — | — |
illuminate/support Version ^10.13 | — | — |
laravel-json-api/laravel Version ^3.0 | — | — |
spatie/laravel-package-tools Version ^1.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.