The package has a clear README, an MIT declaration, and a substantial source tree. Its small project footprint and limited maintenance evidence warrant pinning this version and testing it against your Laravel integration.
55%
Total Score
50
100
72
83
Only one registry account has publish access. The linked repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.
The registry namespace and repository owner match, and the repository is user-owned. This supports ownership continuity but does not provide organizational backing.
The package has 17 releases, but none in the last 12 months; the latest release was about 14 months ago. This suggests maintenance has stopped rather than merely slowed.
There were no commits and no active maintainers in the last three months, consistent with the release history showing no release in about 14 months.
The repository has 1 star and 1 fork, indicating a small user base and limited external validation. This is supporting caution, not evidence of abandonment on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nyholm/psr7 Version ^1.8 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
webmozart/assert Version ^1.11 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.