Usable with caveats: the package is clearly licensed, documented, tested in its repository, and not deprecated or archived. However, it has had no release or commit activity for nearly three years, with no recent issue or pull-request activity and only one registry maintainer.
55%
Total Score
38
100
89
80
The repository had zero commits and zero active maintainers in the last three months, consistent with nearly three years since the last push. This is the main abandonment concern for depending on the package.
Only one account has registry publish access, limiting apparent publishing redundancy. This is a caution rather than a severe risk because the repository is tied to the same individual owner and other project evidence is present.
The registry namespace and repository are owned by the same individual account, confirming consistent ownership but not providing organization-level backing or maintainer redundancy.
The package has only three releases, all concentrated on October 19, 2023, and none in the last 12 months. Nearly three years without a new release is a meaningful maintenance concern, despite the existing release history.
There were no new or closed issues and no new or merged pull requests in the last month; together with the stale release and commit history, this provides no evidence of ongoing community maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/contracts Version ^8.0|^9.0|^10.0 | — | — |
opcodesio/mail-parser Version ^0.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.