It includes a README, tests, and a small dependency set, but has no security policy or security scanning. The repository is small and has little visible community activity, leaving limited evidence of ongoing support.
35%
Total Score
25
100
67
50
The latest release was published in May 2015, and there have been no releases in more than 11 years. That is strong evidence of abandonment for a package intended as a maintained dependency.
There were no commits and no active maintainers in the last three months, consistent with more than 11 years of release inactivity and a substantial abandonment risk.
No declared license, license file, or repository license file was detected. This creates a material legal and transparency concern for adoption.
The repository owner is an individual account rather than an organization, so there is no observed organizational backing to compensate for the long maintenance gap.
The repository has zero stars and forks and one watcher. Low popularity is supporting evidence rather than decisive by itself, but it offers little community support to offset the inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
bleicker/token Version 2.2.* | — | — |
bleicker/session Version 1.0.* | — | — |
doctrine/collections Version ~1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.