Usable with caveats: the package is licensed, clearly tied to its repository, and backed by tests, but its last registry release was over six years ago and there has been no recent commit activity. Depend on it only if its older Laravel compatibility and unchanging maintenance model fit your project.
58%
Total Score
50
100
83
90
The package namespace and repository belong to the same individual account. This confirms ownership alignment, though it does not provide the resilience of organization backing.
The package has six releases since 2018, but the latest release was over six years ago and there were no releases in the last 12 months. This is a meaningful maintenance concern for a framework integration.
There were no commits and no active maintainers in the last three months. Combined with the old latest release, this supports a real abandonment or compatibility-drift concern.
There were no new or closed issues or pull requests in the last month, and one pull request remains open. This offers little evidence of active community maintenance.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone does not establish that a small package is unhealthy.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.5 | — | — |
illuminate/support Version ^7.0 | — | — |
illuminate/notifications Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.