The package includes a full README, tests, and a clear GPL-3.0 license. It has had no commits or releases since July 2025, and the linked repository neither matches the package name nor mentions it.
42%
Total Score
33
100
75
83
The repository recorded zero commits and zero active maintainers in the last three months; its last push was at the initial release in July 2025. This is strong evidence of a currently inactive project.
The repository name does not match the package name and its README does not mention the package. That raises concern that the linked source may not actually belong to this release.
One registry account has publish access. This is limited publishing redundancy, though the signal describes access rather than demonstrated maintenance activity, so the stronger activity signals carry more weight.
The repository is owned by an individual account rather than an organization, providing no visible organizational backing to compensate for the limited registry maintainer base.
There has been only one release, on July 14, 2025, with no releases in the following 12 months. That leaves little evidence of an established release or maintenance cadence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10|^11|^12 | — | — |
illuminate/support Version ^10|^11|^12 | — | — |
barryvdh/laravel-dompdf Version ^3.1 | — | — |
symfony/http-foundation Version ^6|^7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.