The single maintainer and one-star repository leave little visible support. A clear README, MIT declaration, and no install-time scripts improve transparency, but do not offset the limited project activity.
40%
Total Score
50
67
75
This package has only one release, published about seven years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, although the registry does not mark it deprecated.
Only one account has registry publishing access, leaving limited visible publishing continuity. This is a concern for a project that also shows no recent release activity, though access records do not prove who actively maintains it.
The repository has one star, no forks, and no watchers, providing little supporting evidence of an active user or contributor community. Popularity is only supporting evidence, so this reinforces rather than determines the result.
The linked repository is not archived, which is a meaningful positive. However, its last push was about seven years ago, so this does not compensate for the lack of current maintenance shown by the release history.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern alongside the much stronger evidence of inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 5.5.*|5.6.*|5.7.* | — | — |
webonyx/graphql-php Version ~0.13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.