The package is documented and licensed, with tests and a changelog in both the artifact and repository. Its single release was over two years ago, with no recent commits, no security policy, and all 11 workflow actions unpinned.
55%
Total Score
50
71
50
Only one release is recorded, published over two years ago, with no releases in the last 12 months. That provides little evidence of ongoing release maintenance.
The repository has recorded no commits and no active maintainers in the last three months. Together with the single-release history, this raises meaningful abandonment risk.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of adoption or community support.
Composer is used for builds, but no security-scanning tool is reported. The missing scan is a modest transparency and maintenance concern, not proof of unsafe code.
The repository has no security policy. For a web application with authentication, APIs, and data-management features, this leaves vulnerability reporting and response expectations unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/ui Version ^3.0 | — | — |
lcobucci/jwt Version ^4.0.0 | — | — |
mews/purifier Version ^3.2 | — | — |
laravel/helpers Version ~1.4 | — | — |
exment-git/spout Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.