Usable with caveats: the package is small, clearly documented, licensed, and not deprecated or archived. However, it has had no release in 16 months, no commits in the last 3 months, and no repository tests or security policy, so ongoing maintenance is uncertain.
57%
Total Score
50
75
50
The package has one registry maintainer, which creates a limited publishing base. Because the repository is also owned by that same individual, this is consistent ownership rather than a mismatch, but it still leaves little redundancy.
The artifact includes a useful README and this version has GitHub release notes, which support adoption and explain the release. The repository has no tests, leaving correctness less well demonstrated.
The package has 11 releases but none in the last 12 months; its latest release was about 16 months ago. This is a meaningful sign that maintenance may have slowed.
The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the concern raised by the long gap since the latest release.
The repository uses Composer, but it has no security scanning tools. For a small package this is not disqualifying, but it reduces transparency around ongoing maintenance checks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.9 | — | — |
illuminate/support Version ^10.46|^11|^12 | — | — |
toshy/bunnynet-php Version ^5.0 | — | — |
illuminate/filesystem Version ^10.46|^11|^12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.