The package includes a useful README, tests, and a declared MIT license. Its very old release and absent recent repository activity make long-term maintenance and compatibility uncertain.
38%
Total Score
33
100
78
75
The latest release was published about 10 years ago, and there were no releases in the last 12 months. Twenty historical releases show prior activity but do not offset the prolonged stall.
There were zero commits and zero active maintainers in the last three months, indicating no observed current maintenance. Combined with the last push being about 10 years ago, this materially raises abandonment risk.
One registry account has publish access. This alone is not evidence of weak maintenance capacity, but it provides little redundancy alongside the absence of recent activity.
The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to offset the thin maintenance base.
The repository has only 2 stars and no forks, offering little supporting evidence of broad adoption or an active user community. Popularity is supporting evidence, so this is a secondary concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
patchwork/utf8 Version 1.1.* | — | — |
guzzlehttp/guzzle Version ~5.0 | — | — |
illuminate/support Version ^5.0 | — | — |
illuminate/filesystem Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.