The repository has had no commits or active maintainers in the last three months, and it has no security policy. Tests, release notes, a matching repository, and a clear MIT license provide useful transparency and maintenance evidence.
68%
Total Score
63
100
88
88
One registry maintainer is consistent with a user-owned project, though it leaves a limited publishing base if that person becomes unavailable.
The package has been maintained since January 2020 with 15 releases, but only one release in the last 12 months and a median interval of about 114 days indicate a modest release cadence.
The repository recorded zero commits and zero active maintainers during the last three months. This is the clearest maintenance concern, although the August 19 release shows recent publication activity.
Six issues and three pull requests remain open, while none were created, closed, or merged in the last month; this suggests limited current interaction but is not by itself evidence of abandonment.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/database Version >=5.8 <11.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.