The package has clear consumer documentation, tests, and matching MIT licensing. Its maintenance record stops after the initial release burst, and the workflow uses an unpinned action, so long-term dependability is uncertain.
58%
Total Score
50
100
72
83
The repository is owned by an individual account matching the registry namespace, so ownership is clear but there is no organizational backing to compensate for the thin maintenance record.
Although the package has 50 releases, they were all published during an initial burst on one day, followed by no releases in the last 12 months. That pattern weakens evidence of ongoing maintenance.
There were zero commits and zero active maintainers in the last three months. Combined with the absence of recent releases, this is direct evidence that active maintenance has stopped.
There were no new or closed issues or pull requests in the last month and no merged pull requests. This provides no evidence of current maintenance or responsiveness.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any adoption signal adds limited uncertainty for a package with no demonstrated recent activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version >=7 | — | — |
smi2/phpclickhouse Version ^1.4.2 | — | — |
illuminate/database Version >=7 | — | — |
glushkovds/clickhouse-builder Version ^6.1.2 | — | — |
glushkovds/php-clickhouse-schema-builder Version ^1.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.