The small source tree and clear MIT licensing help with transparency. Pin this exact version only if its older dependencies and lack of current support are acceptable; otherwise choose an actively maintained alternative.
38%
Total Score
50
67
75
This package has had only one release, on June 26, 2018, with no releases in the last 12 months. That long publishing gap is strong evidence of abandonment risk.
There were no commits and no active maintainers in the last three months, following more than eight years since the last repository update. This materially increases abandonment risk.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe by itself.
The repository is not formally archived, but its last push was on June 26, 2018, consistent with the release and indicating that the non-archived status does not represent active maintenance.
The linked repository has no security policy, leaving vulnerability-reporting and response practices undocumented. The long-standing inactivity makes this gap more relevant.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 | — | — |
phpunit/phpunit Version ~6.0 | — | — |
symfony/console Version ^4.0 | — | — |
nikic/fast-route Version ^1.2 | — | — |
illuminate/config Version ^5.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.