62%
Total Score
caution
Usable with caveats: recent commit activity has stopped, with one registry maintainer and no security policy.
Only one account has registry publishing access. Because the repository is user-owned rather than organization-backed, this leaves a thin publishing and maintenance base.
The package and repository are both tied to the same user namespace, but the repository owner is an individual rather than an organization, so there is limited visible institutional backing.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that active development has paused after the recent release.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the thin maintenance base.
Composer build tooling is present, but no security scanning tools are reported, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gzhegow/lib Version ^1.0 | — | — |
illuminate/database Version ~9.0|~10.0|~12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.