Its README and changelog make the package easier to understand, and the codebase is small. The broad dependency set and lack of security policy add upkeep and disclosure gaps.
32%
Total Score
25
50
79
75
The latest release was published in August 2015, and there have been no releases in roughly 11 years. This is strong evidence of abandonment for a dependency intended for ongoing use.
The repository has had no commits and no active maintainers in the last three months, with its last push in August 2015. This confirms the long release gap rather than reflecting registry-only inactivity.
The package declares 15 runtime dependencies, including several framework and integration components. That breadth increases compatibility and maintenance risk for an unmaintained package.
Only one registry account is listed as a maintainer. The repository's matching owner and the absence of recent activity provide no visible maintainer depth to compensate for that thin base.
The repository has only 2 stars and no forks, providing little evidence of broad community use or backup maintenance. Popularity is supporting evidence, so this reinforces rather than determines the result.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filp/whoops Version ~1.1 | — | — |
doctrine/dbal Version ~2.3 | — | — |
zizaco/entrust Version ~1.4 | — | — |
illuminate/html Version ~5 | — | — |
illuminate/http Version ~5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.