Unfit to use as published: Packagist marks the package deprecated and points to a replacement, despite the repository still being active and the release having current notes. Prefer the replacement package before adopting this dependency.
22%
Total Score
67
81
67
Packagist marks the entire package as abandoned and identifies a replacement package, which is a severe adoption and continuity risk even though the deprecation is not limited to this release.
One contributor made all five recent commits, leaving the project dependent on a single active maintainer; organization backing provides some handoff capacity but does not remove the concentration risk.
Five commits were made in the last three months, but all activity came from one maintainer, so maintenance is active yet narrow.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so consumers have no documented vulnerability-reporting process.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.5 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.