Its small dependency set and lack of registry deprecation reduce compatibility and withdrawal concerns. The repository could not be found, so maintenance and provenance cannot be checked; the lone maintainer adds fragility.
35%
Total Score
50
100
50
The latest release was about 7 years ago, with no releases in the last 12 months. Although the package had 12 releases and a previously regular cadence, this long inactivity creates substantial abandonment risk.
Only one registry account has publish access. This does not prove that maintenance is inactive, but it indicates limited apparent publishing capacity when combined with the long release gap.
The latest version is v0.5.1, below a stable major release, and 25% of recent releases were prereleases. It is not itself marked as a prerelease, but the version history provides limited maturity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
monolog/monolog Version ^1.23|^2.0 | — | — |
illuminate/support Version 5.4.*|5.5.*|5.6.*|5.7.*|5.8.*|^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.