Organization backing, automated tests, and a matching source repository provide some traceability. Its small dependency set and lack of install scripts reduce operational risk, but do not offset the maintenance and documentation concerns.
32%
Total Score
67
100
57
75
The package has had no release in over 9 years: its latest release was May 17, 2017, with zero releases in the last 12 months. This is strong evidence of abandonment for a dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since the latest release. The non-archived status does not compensate for absent recent activity.
No registry license is declared, and neither the package nor repository contains a recognized license file. Consumers have no clear licensing terms for adoption.
The package includes tests and the repository uses GitHub releases, which provide some maturity evidence. However, it has no README, leaving consumers without package-level usage guidance.
The repository has zero stars and forks and one watcher, offering little supporting evidence of broad adoption or external review. Popularity is only supporting evidence, so this modestly lowers confidence in maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tcg/voyager Version 0.11.* | — | — |
laravel/passport Version ^2.0 | — | — |
illuminate/support Version 5.4.* | — | — |
illuminate/contracts Version 5.4.* | — | — |
componentsv/foundation Version 0.3.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.