The package includes tests, a changelog, a substantial README, and no install-time scripts. Its single release and lack of repository activity since 2015 indicate a long-abandoned project, while the MIT declaration conflicts with the bundled LGPL-3.0 license.
38%
Total Score
33
100
61
83
This is the package's only release, published over 10 years ago, with no releases in the last 12 months. That strongly indicates abandonment for a dependency whose compatibility and maintenance may matter.
There were no commits and no active maintainers in the last three months. Combined with the repository's last push in 2015, this is strong evidence that maintenance has stopped.
The manifest declares MIT, but the artifact contains an LGPL-3.0 license file. Because the detected license is not covered by the declaration, consumers may face unclear licensing obligations.
The repository is owned by an individual user rather than an organization, and the registry namespace differs from that owner. The package mention and matching source tree provide some support, but there is no organizational backing shown.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with a dormant repository, though it does not by itself prove unresolved maintenance problems.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version 5.1.*|5.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.