It has a clear MIT license and no install-time scripts. The package contains substantial source code, but its support capacity and consumer documentation are limited, and ongoing maintenance cannot be verified.
35%
Total Score
50
50
70
100
The package is 2,618 days old, has had no release in the last 12 months, and was last released in September 2020. Thirty-two historical releases show it once had activity, but the prolonged halt is a serious abandonment concern.
Eight runtime dependencies create a moderate maintenance surface, including framework, storage, database, and payment-adjacent infrastructure components. The count alone is not severe, but there are no declared development dependencies to demonstrate a maintained test toolchain.
Only one registry account, eDiasoft, has publish access. This provides little visible continuity if that maintainer stops supporting the package, although registry access alone does not prove current activity.
The artifact includes a README, but it contains only four characters and says "TODO", leaving consumers without meaningful integration guidance. Missing tests and a changelog are normal for a published PHP artifact and are not treated as gaps here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/ui Version ^3.0 | — | — |
league/csv Version ^9.6 | — | — |
doctrine/dbal Version ^2.10 | — | — |
predis/predis Version ^1.1 | — | — |
laravel/helpers Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.