Its license, tests, and package contents are in order, but there is no active maintenance or security policy. The package is archived and deprecated, so pinning it leaves a project dependent on an abandoned release.
12%
Total Score
33
50
50
83
Packagist marks the entire package as abandoned, with no replacement provided; this is a severe adoption risk beyond an isolated withdrawn release.
The last release was about 9 years ago, with no releases in the last 12 months; this strongly indicates the package is no longer maintained.
There were no commits and no active maintainers in the last 3 months; together with the archived repository and old release, this confirms collapsed maintenance.
The linked GitHub repository is archived and was last pushed about 5 years ago, confirming that new fixes and compatibility work are unlikely.
The package declares 10 runtime dependencies spanning Laravel, Fractal, URI, reflection, and YAML components, creating a meaningful compatibility surface for an old release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/uri Version ^4.1 | — | — |
symfony/yaml Version >=2.6 | — | — |
league/fractal Version * | — | — |
illuminate/http Version >=5.1 | — | — |
illuminate/routing Version >=5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.