The package includes tests, a README, matching source files, and a clear MIT license. Its six releases were concentrated in July 2025, with no commits or issue activity since then and no published security policy.
60%
Total Score
50
90
50
The package has had no releases in the last 12 months, and its latest release was published on July 31, 2025, nearly 14 months ago. This is a meaningful maintenance concern despite six releases in its first few days.
The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but this recent inactivity weakens confidence that issues or compatibility changes will be addressed.
Six issues remain open, with no issues or pull requests opened or closed in the last month. This suggests limited recent project activity, although the backlog alone does not show that the package is abandoned.
The repository has no security policy. For a component that handles Spotify authentication and API access, this is a transparency gap, though the available evidence does not show a security incident.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/console Version ^11.0 | — | — |
illuminate/support Version ^11.0 | — | — |
laravel-zero/framework Version ^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.