The package has clear licensing, documentation, tests in the repository, and a matching source project. Its small maintainer base, absent security policy, and unpinned workflow actions add maintenance and release-hygiene concerns.
62%
Total Score
38
100
89
67
There were zero commits and zero active maintainers in the last three months. Together with the year-long release pause, this indicates maintenance has effectively stopped recently.
Only one registry account has publish access. Because the repository is owned by an individual rather than an organization, this represents a real continuity risk if that maintainer becomes unavailable.
The registry namespace and repository are owned by the same individual account, which supports clear ownership but provides no organizational backing to compensate for the single-maintainer risk.
The package has 29 releases since May 2020, but none in the last 12 months despite a prior median interval of about 20 days. This sharp pause is a meaningful maintenance concern.
There were no new or closed issues or pull requests in the last month, with one open pull request. This provides little evidence of current project responsiveness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.5|^6.0|^7.0|^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
littleredbutton/bigbluebutton-api-php Version ~5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.