The MIT license, repository tests, and GitHub release support basic transparency. The package shows little evidence of ongoing maintenance or broader project support.
39%
Total Score
50
60
50
Only one release exists, published about six years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.
The package has one registry maintainer and the repository is user-owned rather than organization-backed. A single-person publishing base offers limited visible continuity if that maintainer becomes unavailable.
The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of adoption or community resilience. Popularity is only supporting evidence, but this does not offset the stale release history.
The repository is not archived, which is a positive, but it was last pushed about six years ago. The absence of recent repository activity still lowers confidence in ongoing maintenance.
No security policy was found in the repository. This is a transparency and vulnerability-reporting gap, though it is less serious than the lack of maintenance evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/bus Version ^8.0 | — | — |
symfony/console Version ^5.0 | — | — |
league/flysystem Version ^1.0.64 | — | — |
codicastudio/image Version ^1.4.0 | — | — |
illuminate/console Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.