The package declares MIT while its bundled license is Apache-2.0, creating a legal clarification gap. It is small and unarchived, with a clear README and no install-time scripts.
62%
Total Score
50
100
78
75
A license file is present, but the manifest declares MIT while the detected license text is Apache-2.0. The mismatch should be clarified before adoption where licensing matters.
The artifact includes a readable README, while the absence of tests and a changelog is normal for published package artifacts. The source repository also has no tests or changelog, so there is limited project documentation beyond the README.
The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it provides a limited maintainer base.
The package has 11 releases over roughly 9 years, but none in the last 12 months; the latest release was about 18 months ago. This indicates a meaningful maintenance slowdown.
There were no commits and no active maintainers in the last 3 months. Combined with the lack of recent registry releases, this raises abandonment risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.0||^6.0||^7.0||^8.0||^9.0||^10.0||^11.0||^12.0 | — | — |
gnello/php-mattermost-driver Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.