The source repository includes tests, a changelog, a security policy, and a clear MIT license. Its workflow is fully analyzed but all six action references are unpinned, and the linked repository does not identify or mention this package.
35%
Total Score
25
100
69
88
The package has had no releases in more than five years, despite 40 total releases, which is strong evidence of abandonment for a maintained library.
There were no commits and no active maintainers in the last three months, reinforcing the release-history evidence of a dormant project.
The repository name does not match the package and its README does not mention the package, so the linked source may not actually belong to this release.
The registry namespace and repository owner are different individual accounts, providing no organizational backing signal for this package.
The repository uses Composer for builds, but no security scanning tooling is present, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/flysystem Version ^1.1.1 | — | — |
illuminate/support Version ^6.0 || ^7.0 || ^8.0 | — | — |
illuminate/contracts Version ^6.0 || ^7.0 || ^8.0 | — | — |
graham-campbell/manager Version ^4.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.