It has a clear MIT license, a matching repository, and a useful README. The project has seen no release or commit activity for over three years, while tests and a security policy are absent.
48%
Total Score
67
100
78
83
The package has had only two releases, both in May 2023, and none in the following over three years. That strongly suggests abandonment risk despite the stable 1.0.1 version.
There were no commits and no active maintainers in the last three months, consistent with the over-three-year gap since the last repository push. This is a substantial abandonment concern.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to compensate for the inactivity.
Composer is used for the build, which fits the package ecosystem, but no security scanning tools are configured. For this small package, the missing scanning is a secondary hygiene concern.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This adds a transparency gap, especially for a package used in web applications.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^10.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.