The project remains licensed, has a substantial source tree, and includes repository tests and a changelog. Its lack of commits and releases since June 2021 makes this release a significant maintenance risk.
43%
Total Score
25
79
50
The package has 160 releases over more than 10 years, but none in the last 12 months and its latest release was in June 2021. This long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the multi-year release gap and indicating no observed maintenance capacity.
There were no new or closed issues or pull requests in the last month, with one issue still open. This supports the broader evidence of inactive maintenance, though it is weaker than the release and commit gaps.
The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, adding concern to an already inactive project.
The assessed release is a beta while the registry's latest version is stable v5.2.9, so this specific release is both old and less mature than the current line.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
opis/closure Version ^3.0 | — | — |
illuminate/http Version ^5.4 | — | — |
illuminate/routing Version ^5.4 | — | — |
illuminate/support Version ^5.4 | — | — |
webonyx/graphql-php Version ^0.11.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.