Risky to adopt: the package appears effectively unmaintained, with no releases or repository pushes since July 2022. It has a real MIT license, tests and a changelog in the repository, but the long maintenance gap makes it a liability for new projects.
43%
Total Score
75
67
63
Only two releases were published, both in July 2022, with no releases in the last 12 months despite the package being over four years old. This is strong evidence of abandonment risk.
The package defines a post-create-project-cmd lifecycle script. Such a script can run automatically during project setup and deserves review, although this signal alone does not establish a health or safety verdict.
There were no new issues, pull requests, or merged pull requests in the last month, and no pull requests were open. This provides no evidence of ongoing maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external adoption or community-maintenance reassurance.
The repository is not formally archived, but its last push was on July 7, 2022, matching the stale registry history. The lack of recent repository activity materially offsets the unarchived status.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel-zero/phar-updater Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.