A single maintainer and no repository security policy limit resilience and transparency. MIT licensing, clear documentation, and an unarchived matching repository provide useful adoption support.
62%
Total Score
50
100
88
50
Only one registry maintainer is listed, leaving limited visible publishing capacity; the matching repository owner provides some continuity but not a broader maintainer base.
The registry namespace and repository are owned by the same individual account, showing consistent ownership but no organizational backing.
The latest release was over three years ago, with no releases in the last 12 months; the package has eight releases overall, so maintenance appears stalled.
There were no commits and no active maintainers in the last three months, consistent with the broader absence of releases and increasing abandonment risk.
Composer build tooling is present, but no security scanning tools are configured, leaving repository security hygiene less transparent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~5|~6|~7|~8 | — | — |
paypal/paypal-checkout-sdk Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.