Usable with caveats: the package is licensed, stable, clearly documented, and not deprecated or archived. However, it has had no release or commit activity for roughly 15 months, with a one-person project and minimal adoption, so verify it still meets your needs before depending on it.
58%
Total Score
50
100
78
90
There were zero commits and zero active maintainers in the last three months, consistent with roughly 15 months since the last push and indicating currently inactive maintenance.
Only one registry publishing account is listed, leaving a thin publishing base. The repository is user-owned, so this is a modest resilience concern rather than evidence of organizational backing or abandonment by itself.
The registry namespace and repository are associated with individual user accounts rather than an organization. That is consistent with a small independent package and, combined with inactivity, provides limited continuity assurance.
Although six releases were published close together, there have been no releases in roughly 15 months, which is a meaningful maintenance concern for a client library.
The repository has zero stars, one fork, and one watcher, indicating very limited visible adoption. Popularity is supporting evidence only, so this lowers confidence in maturity but is not independently severe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravie/codex Version ^6.2 | — | — |
symfony/http-client Version ^7.2 | — | — |
laravie/codex-filter Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.