The package has a declared LGPL-3.0+ license and no install-time scripts, but its small artifact offers little consumer documentation. The repository could not be found, so maintenance and provenance cannot be checked; this old integration carries significant abandonment risk.
38%
Total Score
100
50
75
This package has only one release, published nearly 12 years ago, and no releases in the last 12 months. That strongly indicates abandonment risk for a dependency.
The artifact contains only three files, including one source file and the Composer manifest. That is consistent with a small module but provides little visible documentation or implementation context.
The artifact contains no README, which makes integrating this library harder; absent tests and changelog are normal for a published artifact and are not concerns by themselves.
The release is v0.1.0, so it is not a stable major release. The lack of any later release reinforces uncertainty about long-term support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/queue Version 4.1.* | — | — |
codejunkii/vivapayments Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.