Package to give a project an license and prevent installation if client doesn't have it
45%
Total Score
unhealthy
Risky: one release and no recent commit activity point to a largely abandoned v0.1 package.
This package has only one release, published about 26 months ago, with no releases in the last 12 months. That is substantial evidence of limited maintenance for a dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the package having received no recent maintenance. Its last push was about 26 months ago, which raises abandonment risk.
The registry has one publishing maintainer. That can be normal for an individual project, but it provides limited redundancy when combined with the absence of recent repository activity.
The repository has zero stars and zero forks, with one watcher. Popularity is not required for a healthy package, but these counters provide little supporting evidence of adoption or community oversight.
Composer build tooling is present, but no security scanning tooling is reported. This is a minor transparency and maintenance gap, outweighed by the much stronger evidence from the release and commit history.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^8.0|^9.0|^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.