Sync with mailman list
68%
Total Score
caution
Usable with caveats: long release gaps and no recent commits weaken confidence in ongoing maintenance.
One registry maintainer creates a thin publishing base, although the linked repository confirms the same individual owns the source project.
The package has only three releases over roughly eight years, with a median interval of about four years; one release in the last 12 months shows activity but a sparse history limits maturity evidence.
The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of sustained maintenance despite the recent release.
Two stars and no forks indicate limited external adoption and review; popularity is supporting evidence, so this is a modest concern rather than a verdict.
Composer build tooling is present, but no security scanning tools were detected, leaving security oversight less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.8 | — | — |
illuminate/support Version ^11.0 | — | — |
illuminate/filesystem Version ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.