The package is licensed, documented, tested in its repository, and has a release note for this version. Those strengths cannot offset the lack of maintenance and the project's withdrawn status.
10%
Total Score
0
40
50
Packagist marks the entire package as abandoned, with no replacement package specified. This is a direct warning that ongoing support should not be expected.
The package has had no releases in the last 12 months, and its latest release is from May 2021, despite having 11 releases overall. The long period without releases indicates the project is no longer actively maintained.
The repository had zero commits and zero active maintainers in the last three months. This confirms the absence of current development activity rather than merely a quiet release cadence.
The linked repository is archived, and its last push was in September 2021. An archived source project is a severe abandonment risk for a dependency.
The single workflow was fully analyzed without untrusted checkouts or script injection, but all three action references are unpinned and the audit found a high-confidence unpinned container image. This is a repository hygiene weakness, although the archived project is the more serious concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.9|^3.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^8.0 | — | — |
grayloon/laravel-magento-api Version 0.x | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.