The package includes a real test suite and a stable release line, and it is not deprecated or archived. Its documentation, licensing, and maintenance evidence are too thin for a dependable long-term dependency.
38%
Total Score
67
72
67
No declared license, license file, or repository license file was found, leaving the legal terms for reuse unclear.
The file tree contains focused source code, interfaces, exceptions, and PHPUnit tests, but no README or license file is visible, limiting transparency for consumers.
The package contains tests and the repository also has tests, which provides useful evidence of basic project discipline. The missing README and changelog reduce consumer guidance, but missing tests or changelogs in the artifact would otherwise be normal.
The latest release was in May 2022, with no releases in the following four years; the earlier median interval of about 38 days does not compensate for the prolonged silence.
There were zero commits and zero active maintainers in the last three months, consistent with the multi-year release gap and increasing abandonment risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.2 | — | — |
illuminate/support Version ^6.0|^7.0|^8.0|^9.0 | — | — |
league/oauth2-client Version ^2.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.