The MIT license, README, changelog, repository tests, and security policy provide useful transparency. The single-owner project has no security scanning, so future fixes may be limited.
42%
Total Score
25
71
100
The package has had only 3 releases, all during a 3-day period in April 2021, with no releases in the last 12 months. This strongly raises abandonment risk despite a stable 1.0.2 version.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the release history showing no activity since 2021. No provided maintenance signal compensates for this lapse.
Only one registry maintainer is listed, and project_backing identifies a user-owned repository rather than organizational backing. This leaves limited visible capacity for continued maintenance.
The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of broad community adoption or backup maintenance capacity.
Composer is used for builds, but no security scanning tools are detected. This is a maintenance and transparency gap, though it is less significant than the lack of recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^8.0 | — | — |
microsoft/microsoft-graph Version ^1.29 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.