The package is clearly documented, licensed, tested in the repository, and avoids install-time scripts. Its small user and maintainer base leaves limited evidence of ongoing support.
42%
Total Score
25
63
50
The latest release was in December 2020, and there were no releases in the following 12 months. This long release gap is a significant maintenance concern despite 13 historical releases.
The repository recorded no commits and no active maintainers in the measured three-month period, consistent with the multi-year release gap and indicating likely abandonment risk.
Only one registry publishing maintainer is listed, leaving little observable redundancy for release continuity or issue response. The repository is user-owned, so this is a meaningful concern rather than normal organizational publishing hygiene.
The repository has 1 star, 0 forks, and 1 watcher, providing little evidence of a broad user or contributor community that could help sustain the package.
No repository security policy was found. This does not establish a vulnerability, but it reduces transparency about how security issues should be reported and handled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.3|^7.0 | — | — |
illuminate/config Version ^5.7|^6.0|^7.0|^8.0 | — | — |
illuminate/container Version ^5.7|^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.