The Laravel Framework.
38%
Total Score
unhealthy
Risky: maintenance stopped for over three years and the linked repository does not identify or mention this package.
The package has had no release in over three years, with zero releases in the last 12 months. This is substantial evidence of abandonment for a framework integration package.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of current maintenance capacity.
There were no new or closed issues and no pull requests in the last month, alongside two open issues. This reinforces the absence of recent project activity.
The repository name does not match the package name, and its README does not mention the package. Although subpackages can use monorepos, these combined facts make package ownership and provenance less transparent.
The linked repository has no security policy, leaving no documented channel or process for handling vulnerabilities. This is a maintenance and transparency gap, especially for a package integrating a web application framework.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
botman/botman Version ^2.7 | — | — |
laravel/tinker Version ^2.7 | — | — |
laravel/sanctum Version ^2.14.1 | — | — |
botman/driver-web Version ^1.5 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.