The stable version and matching source repository are positives, but the project has had no release in over eight years and no commits in the past three months. Missing security scanning and a security policy add maintenance uncertainty for a framework.
38%
Total Score
50
50
75
50
The latest release was published over eight years ago, with no releases in the last 12 months. Although the package had six releases and a roughly 35-day median interval early on, current maintenance appears stopped.
The repository had zero commits and zero active maintainers in the past three months, consistent with the release history showing no release in over eight years. This is strong evidence of abandonment risk.
Seven runtime dependencies include the framework, WordPress, HTTP, and Composer integration components, giving the package a meaningful dependency surface. The count is not excessive for this kind of framework, but its old dependency ecosystem adds maintenance uncertainty.
The package uses post-autoload-dump, post-create-project-cmd, and post-root-package-install scripts. These are relevant to a Laravel-style framework, but install-time execution still increases dependency and installation complexity.
There are no open issues or pull requests and no issue or pull-request activity in the past month. A clean tracker is not evidence of active maintenance when commit and release activity are also absent.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ~1.0 | — | — |
fideloper/proxy Version ~3.3 | — | — |
guzzlehttp/guzzle Version ~6.0 | — | — |
johnpbloch/wordpress Version ~4.8 | — | — |
lara-press/framework Version 5.5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.