MIT licensing, a README, repository tests, and no install-time scripts improve transparency and installation safety. The available evidence still offers no current maintenance path for this release.
22%
Total Score
0
69
100
The package has 429 releases over roughly 13 years, but none in the last 12 months; its latest release was about 7 years ago. This sustained halt strongly indicates abandonment.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. This is strong evidence of inactive maintenance.
The repository has zero stars, forks, and watchers. This provides little supporting evidence of adoption, though popularity alone is not decisive for package health.
Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap, not enough to outweigh the severe maintenance concerns.
The assessed version is v6.0.1, while the collected registry profile reports v5.1.1 as the latest version. That inconsistency reduces confidence that this release is part of an actively maintained release line.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.7 | — | — |
opis/closure Version ^3.1 | — | — |
nesbot/carbon Version ^2.0 | — | — |
psr/container Version ^1.0 | — | — |
symfony/debug Version ^4.3.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.