This is a usable, established package with more than seven years of release history, a stable non-prerelease version, an active non-archived organization-owned repository, clear licensing, and no install-time lifecycle scripts. However, maintenance appears sparse: only one release occurred in the last 12 months, the repository recorded no commits or active maintainers in the last three months, and the artifact and repository contain no tests. The absence of repository security policy, security scanning, and explicit workflow token permissions also weakens transparency and CI hygiene. Overall, it is reasonable to depend on with normal review and monitoring, but it does not demonstrate the active maintenance and engineering assurance expected of a highly healthy dependency.
68%
Total Score
88
100
78
80
A README and changelog are present, and GitHub Releases are used, but neither the artifact nor repository contains tests. For a library, the missing test suite is a meaningful maintenance and regression-risk gap.
The package has existed since March 2019 and has eight releases, but only one release was published in the last 12 months and the median release interval is about 390 days, indicating slow maintenance cadence.
The repository recorded zero commits and zero active maintainers over the last three months. Although the repository was recently pushed and a release was published, the lack of sustained commit activity is a meaningful maintenance concern.
The repository has only 2 stars, 0 forks, and 5 watchers, indicating limited adoption and external validation. This is supporting evidence rather than a decisive health failure.
Composer build tooling is present, but no security scanning tools were detected. The build setup is adequate while security assurance is limited.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
eluceo/ical Version ^0.16 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.