The source includes tests and a clear MIT license, but its small dependency footprint does not offset the lack of recent maintenance evidence. Pin 1.0.0 only if you have verified it meets your needs.
35%
Total Score
100
75
83
The package has only one release, published about 6 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.
The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is not decisive, but these figures provide little supporting evidence of community adoption or maintenance.
The repository is not archived, but it was last pushed about 6 years ago, matching the stale release history and providing no evidence of ongoing maintenance.
No security policy was found in the repository. This is a transparency and maintenance gap, though it is less significant than the long absence of releases and repository activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spatie/url Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.