Risky to adopt for new projects: the package has had no release or repository activity since January 2018, and it remains an immature 0.x release. It is licensed, documented, and not deprecated or archived, but its long-term maintenance risk is substantial.
45%
Total Score
0
100
79
75
The package has 7 releases, but its latest release was in January 2018 and it has had no releases in the last 12 months. The earlier median interval of about 10 days shows initial activity, but does not offset more than eight years without a release.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release pause. This is strong evidence of abandonment risk for a library integrated into an application.
The repository has no security policy. This is a transparency gap, though it is secondary to the much more significant evidence of prolonged inactivity.
Version 0.3.4 is not a prerelease, but the package remains below 1.0, which indicates a less mature compatibility commitment when combined with its long inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
moneyphp/money Version ^3.0 | — | — |
laravel/framework Version ^5.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.