The release is well packaged, licensed, tested, and has no install-time scripts. Its registry history is stale and inconsistent, and the repository could not be found, leaving maintenance and provenance difficult to verify.
45%
Total Score
100
63
100
The package is 843 days old, has only four releases, and has had no release in the last 12 months; the releases were clustered within minutes, providing little evidence of sustained maintenance.
The assessed release is presented as v1.3.1 while the registry reports latest_version 1.0.2. Although it is a stable major and not a prerelease, that mismatch reduces confidence in release metadata.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pragmarx/yaml Version ^1.0 | — | — |
symfony/process Version ^3.3|^4.0|^5.0|^6.0 | — | — |
laravel/framework Version >=5.5.33 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.