The package has had no release or repository commits for about seven years, and the repository has no security policy. Its tests, README, MIT declaration, and non-deprecated status provide useful transparency but do not offset the maintenance risk.
42%
Total Score
33
100
78
75
The latest release was published in July 2019, with no releases in the last 12 months. That long gap is a substantial abandonment risk for a package used in application generation.
There were no commits and no active maintainers in the last three months, consistent with the roughly seven-year gap since the last release. This materially raises abandonment risk.
The repository is owned by an individual account rather than an organization, so the small registry maintainer list is not supported by clear organizational backing. The ownership context adds limited maintenance uncertainty.
There were no new or closed issues or pull requests in the last month, and no pull requests were open. This indicates no recent community maintenance activity, although issue counts are partly unknown.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no community signal to offset the long maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.6.0 | — | — |
illuminate/console Version 5.5.*|5.6.*|5.7.*|5.8.* | — | — |
illuminate/support Version 5.5.*|5.6.*|5.7.*|5.8.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.