The package is clearly licensed, documented in its repository, tested, and installs without lifecycle hooks. Its source and registry identity match, but there is little evidence of current support for a production dependency.
38%
Total Score
0
75
75
The package has had no releases in the last 12 months, and its latest release was in February 2021. That is more than five years without a new registry release, which is a strong abandonment concern.
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the absence of releases since February 2021. This leaves current compatibility and maintenance uncertain.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no additional indication of community review or backup maintenance.
Composer build tooling is present, but no security-scanning tools are reported. This is a modest transparency and maintenance gap, especially alongside the long period without activity.
The repository has no security policy. That weakens the project's disclosure and support expectations, although it is less significant than the prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.8|^4.0 | — | — |
fzaninotto/faker Version ^1.8 | — | — |
league/flysystem Version ^1.0 | — | — |
illuminate/console Version ^5.7|^6.0|^7.0 | — | — |
illuminate/routing Version ^5.7|^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.