There has been no release for more than six years, and only one registry maintainer is listed. The stable version and small dependency set do not offset the package's abandoned status.
12%
Total Score
50
100
33
Packagist marks the entire package as abandoned, with no replacement package provided. This is a severe adoption risk independent of the otherwise stable version.
The latest release was published more than six years ago, with no releases in the last twelve months. This is strong evidence of abandonment for a package intended to integrate with a changing framework.
Only one account has registry publish access, indicating limited apparent publishing capacity. This is administrative evidence rather than proof of inactivity, but it adds to the maintenance risk alongside the stale release history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^5.6 || ^6.0 | — | — |
alymosul/exponent-server-sdk-php Version 1.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.