The Laravel Framework.
38%
Total Score
unhealthy
Risky: the release has not been updated since 2019 and repository work has stopped.
The package has only two releases, with the latest published in September 2019 and none in the last 12 months. This is a substantial abandonment concern for a dependency.
The repository recorded no commits and no active maintainers during the last three months, reinforcing the long gap since the latest release.
The manifest declares MIT, but the detected LICENSE file is Apache-2.0. The release is licensed, but the mismatch creates legal ambiguity that should be resolved before adoption.
The package runs post-autoload-dump, post-create-project-cmd, and post-root-package-install scripts. These are normal for a Laravel application scaffold but increase install-time behavior and review needs.
There are 24 open pull requests, with no new or merged pull requests in the last month. This suggests unresolved maintenance backlog rather than active project stewardship.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ^1.0 | — | — |
fideloper/proxy Version ^4.0 | — | — |
laravel/framework Version ^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.