Tests, a README, an MIT license, and a matching organization-backed repository provide useful transparency. Maintenance has stopped since May 2022, with no recent releases or commits and little community activity; pinning this version carries meaningful abandonment risk.
54%
Total Score
50
100
72
75
The package has had no release in over four years and none in the last 12 months. Its five-release history shows an established release, but the prolonged pause materially raises abandonment risk.
There were no commits and no active maintainers in the last three months, while the repository's last push was in May 2022. This indicates stopped maintenance for a framework integration package.
The repository has zero stars, one fork, and one watcher. Popularity is only supporting evidence, but these small numbers provide little external evidence of adoption or review.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap, while the build setup supports reproducible package work.
The linked repository is not archived, although its last push was in May 2022, consistent with the maintenance concerns shown by the release and commit signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
owasp/phprbac Version ^2.0 | — | — |
illuminate/config Version >=7.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.