The linked project has had no commits in the last three months and shows no community activity, while the package has had no release in two years. Its license and stable version are clear, but the repository offers little evidence of active stewardship.
38%
Total Score
33
63
67
The package is two years old with 815 releases but none in the last two years, indicating a release burst followed by prolonged inactivity. This is a substantial maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the registry's two-year release gap, this is strong evidence of inactive maintenance.
The artifact has no README, tests, or changelog, and the repository also reports none. The missing consumer documentation is a minor transparency gap for a library package.
The package and repository are owned by the same individual account, with no organization backing shown. This does not prove poor stewardship, but it provides limited evidence of maintenance capacity.
There were no new or merged pull requests and no issue activity in the last month. This is consistent with the broader signs of low ongoing project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.72.2|^3.0 | — | — |
doctrine/inflector Version ^2.0 | — | — |
voku/portable-ascii Version ^2.0 | — | — |
illuminate/contracts Version ^11.0 | — | — |
illuminate/macroable Version ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.