The MIT license and lack of install-time scripts reduce adoption friction. Its small, dormant project leaves substantial maintenance and compatibility risk for a library dependency.
35%
Total Score
75
75
The artifact contains no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but a library with no consumer documentation is a genuine transparency and integration gap.
The package has only two releases, both dating to January 2016, and none in the last 12 months. This is strong evidence of abandonment for a library dependency, despite the package not being deprecated.
The linked repository has one star, zero forks, and one watcher. Popularity is not decisive, but these figures provide little evidence of community review or shared maintenance capacity.
The repository has no security policy. For a small, dormant library this weakens the route for reporting and handling future issues, adding to its transparency concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/laravel Version >5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.