The project has gone three months without a commit, and its four open pull requests show no recent merging activity. It remains backed by an organization, includes tests and release notes, and is not deprecated or archived; tighten workflow hygiene before relying on it heavily.
62%
Total Score
67
100
86
50
The package has six releases over 444 days, but only one release in the last 12 months; the roughly six-day median interval reflects earlier activity rather than current momentum.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance may have paused.
There are four open pull requests but no issues or pull requests were merged in the last month, which is consistent with the recent lack of active maintenance.
No security policy was found, reducing the transparency of vulnerability reporting and maintainer response expectations.
Version v0.2.0 is not a prerelease, but the 0.x major version indicates an API that may still change substantially.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^11.0||^12.0||^13.0 | — | — |
dij-digital/langfuse-php Version ^0.2.0 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.