Usable with caveats: this is a mature, licensed package with tests and a stable release, but version 4.2.0 has had no new registry release for over four years and the repository shows no recent commits. Review compatibility and maintenance needs before adopting it for a new project.
62%
Total Score
67
100
88
75
The project has 48 releases over a long history, but its latest registry release was over four years ago and it had no releases in the last 12 months. That is a meaningful maintenance concern for a framework integration package.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this raises abandonment risk even though the repository is not archived.
There are open issues and pull requests, but none were opened, closed, or merged in the last month, indicating limited recent project activity.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ~1.20||^1.26.3||^2.0 | — | — |
illuminate/events Version 5.4.*||5.5.*||5.6.*||5.7.*||5.8.*||^6.0||^7.0||^8.0||^9.0 | — | — |
illuminate/session Version 5.4.*||5.5.*||5.6.*||5.7.*||5.8.*||^6.0||^7.0||^8.0||^9.0 | — | — |
illuminate/support Version 5.4.*||5.5.*||5.6.*||5.7.*||5.8.*||^6.0||^7.0||^8.0||^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.