The README is usable and the dependency list is small. There is no license or security policy, and the project shows no recent maintenance or security scanning.
40%
Total Score
0
100
75
83
The latest release was nearly five years ago, with no releases in the last 12 months. Three releases over the package's lifetime provide some history, but not current maintenance evidence.
The repository had zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating little ongoing support.
No declared license, license file, or repository license file was detected. This creates a real adoption and redistribution concern with no provided evidence to compensate for it.
Composer is used as a build tool, which is appropriate for this package, but no security scanning tools are configured. Combined with the lack of recent activity, this weakens maintenance transparency.
The repository has no security policy, so there is no stated path for reporting vulnerabilities or documenting security handling. The absence of security scanning in repo_tooling does not compensate for this gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^8.0 | — | — |
islenbo/aliyun-log-php-sdk Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.