The package includes a README, tests, documentation, and an MIT license, with no install-time scripts. Organization backing and a non-archived repository provide continuity, but workflow permissions and unpinned actions weaken build hygiene.
59%
Total Score
83
100
78
83
The package is mature at about four years old with 25 releases, but it has had no releases in the last 12 months. That weakens evidence of ongoing maintenance.
There were no commits and no active maintainers during the last three months, consistent with the lack of recent releases and raising abandonment risk.
The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent and the source may not clearly belong to this release.
The repository has only 1 star and no forks, indicating limited external adoption. Popularity is supporting evidence rather than a verdict, so this is a modest concern.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
cebe/php-openapi Version ^1.5 | — | — |
illuminate/database Version ^9.0|^10|^11 | — | — |
adbario/php-dot-notation Version ^3.1 | — | — |
spatie/data-transfer-object Version ^3.9 | — | — |
michael-rubel/laravel-formatters Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.