The MIT license, matching repository, and repository test suite provide useful transparency. A small dependency surface and no install-time scripts reduce adoption risk, but the project lacks a security policy and has limited visible community activity. Pinning this version should be treated as a maintenance trade-off.
38%
Total Score
25
100
79
75
The package has made no release in over six years, with zero releases in the last 12 months; its 17-release history shows early activity but no ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating likely abandonment.
There were no new issues, closed issues, or pull requests in the last month, and no pull requests were merged; this provides no evidence of current community maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external adoption signal to offset the maintenance concerns.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less severe than the inactivity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jaxwilko/ups-api Version ^1.0 | — | — |
illuminate/support Version ^5.5|^6.0 | — | — |
illuminate/contracts Version ^5.5|^6.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.