The MIT license, readable documentation, repository tests, changelog, and organization backing provide useful transparency. Its broad dependency set and missing security policy add maintenance concerns, while the release and repository status require replacing or avoiding this dependency.
12%
Total Score
50
50
61
83
The registry marks the entire package as abandoned, with no replacement specified. This is a direct warning against taking a new dependency on it.
Although the package has 160 releases over roughly nine years, it has had no releases in the last 12 months and was last released about two years ago, indicating abandonment risk.
The repository has had zero commits and zero active maintainers in the last three months, consistent with the archived and abandoned status.
The linked repository is archived and has not been pushed since July 2024, so it is no longer an actively maintained source for this release.
The package declares 53 runtime dependencies, including a broad Laravel application stack. That creates substantial upgrade and maintenance coupling for a foundation package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
torann/geoip Version ^3.0.0 | — | — |
geoip2/geoip2 Version ^2.11.0 | — | — |
illuminate/log Version ^10.0.0 || ^11.0.0 | — | — |
league/fractal Version ^0.20.0 | — | — |
symfony/finder Version ^6.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.