The MIT license and matching source repository make the package straightforward to inspect and reuse. Its minimal documentation and absent security process provide little support for a library whose maintenance has stopped.
42%
Total Score
33
69
75
The latest release was published in August 2022, with no releases in the following four years and only four releases overall. This is strong evidence of abandonment risk, despite the package not being deprecated.
The repository had zero commits and zero active maintainers during the last three months. Combined with the last push in August 2022, this materially raises abandonment risk.
The artifact includes a README and the repository contains tests and uses GitHub releases, which are positive project signals. However, the published README is only 15 characters and says “Coming soon,” limiting consumer documentation.
The package and repository are owned by the same individual account, so the source appears aligned with the published package. Individual ownership provides less visible continuity than organizational backing when maintenance has stopped.
There are no open issues or pull requests and no activity in the last month. This is consistent with a dormant project, although the absence of outstanding work is not itself harmful.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.0 | — | — |
phpunit/phpunit Version ^7.0 || ^8.0 || ^9.0 | — | — |
stripe/stripe-php Version ^7.0|^8.0 | — | — |
illuminate/support Version ^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.