Clear documentation, tests, examples, and a declared MIT license support adoption. The small project footprint and absent security policy leave less assurance for long-lived use.
58%
Total Score
50
78
50
The package has 32 releases, but its latest release was on March 17, 2022, with no releases in the past 12 months. This long gap materially raises abandonment risk despite the earlier release cadence.
There were zero commits and zero active maintainers in the three months before collection, consistent with the release history showing no recent updates. This is a meaningful maintenance and abandonment concern.
The repository has 11 stars and 1 fork, indicating a small project footprint. Popularity is only supporting evidence, but the limited external adoption provides little additional assurance.
Composer build tooling is present, but no security-scanning tools were detected. That is a hygiene gap rather than evidence of an unsafe release.
The linked repository is not archived, which is a positive counter-signal to the lack of recent activity. Its last push was still March 17, 2022, so this does not establish active maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.0 || ^6.0 || ^7.0 || ^8.0 || ^9.0 | — | — |
art4/json-api-client Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.