40%
Total Score
67
50
69
50
The package has had no release in more than seven years, with zero releases in the last 12 months; its earlier 24-day median interval does not compensate for the prolonged silence.
The package declares 27 runtime dependencies, creating a broad dependency surface for an application package and increasing maintenance exposure.
One registry publishing maintainer is a thin release-control base, though the organization-owned repository provides some backing for the project.
Four issues remain open and there has been no issue or pull-request activity in the last month, offering little evidence of current maintenance.
One star and one fork show a very small user and contributor footprint, consistent with limited external validation but not conclusive on their own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filp/whoops Version ^2.2 | — | — |
league/tactician Version ^1.0 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
web-token/jwt-framework Version ^1.2 | — | — |
roave/security-advisories Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.