The MIT license, substantial README, and no install-time scripts make the package transparent to inspect. Its tiny user base and missing security policy add concern; use only if you can maintain the integration yourself.
38%
Total Score
25
75
75
This package has had only one release, published nearly eight years ago, with no releases in the last 12 months. That is strong evidence of abandonment risk despite its stable version.
The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long release gap and indicating little ongoing maintenance capacity.
Only one registry publishing account is listed, leaving a thin publishing base. The linked repository is user-owned rather than organization-backed, so there is no provided evidence of broader continuity.
The repository has one star, one fork, and no watchers, providing little supporting evidence of an active user or contributor community. Popularity is not decisive, but it does not compensate for the maintenance gap.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities. This compounds the absence of recent maintenance activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jlawrence/eos Version 3.* | — | — |
jenssegers/date Version v3.* | — | — |
consoletvs/support Version ^2.1.2 | — | — |
illuminate/support Version 5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.