The release is over five years old, and recent repository activity is absent. The missing license and README reduce transparency, although the repository remains active-looking rather than archived and the package has a long release history.
48%
Total Score
50
50
50
The package has 85 releases over about 10 years, but none in the last five years; that long release gap is a substantial maintenance concern.
No license declaration or license file was detected in the package or repository, leaving usage and redistribution rights unclear.
The package has no README, tests, or changelog, while its GitHub release support is present. Missing tests and changelog are normal in published artifacts, but the absent README matters for a library consumers must integrate.
There were no commits and no active maintainers in the last three months, which reinforces the risk suggested by the stale release history.
There were no new or closed issues or pull requests in the last month, with two open pull requests remaining; this suggests limited current project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
badchoice/grog Version ^2.0.3 | — | — |
illuminate/database Version ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.