The MIT license and modest dependency set are positives. The repository has no security policy and only two stars, leaving limited evidence of review and adoption support.
35%
Total Score
0
100
64
50
This package has had one release, on 29 July 2019, and none in the following roughly seven years. That strongly raises abandonment risk, although the package is not marked deprecated.
There were zero commits and zero active maintainers in the last three months, consistent with a repository that has seen no meaningful activity since 2019. This is a substantial maintenance and abandonment concern.
The repository has only 2 stars, 0 forks, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it provides little evidence of broad usage or community review.
The repository uses Composer, appropriate for a PHP package, but has no security-scanning tools. The missing scanning is a hygiene gap, while Composer support is a positive.
The linked repository is not archived, which leaves the project administratively available. Its last push was in August 2019, so this does not compensate for the long inactivity period.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
carno-php/traced Version ~2.0 | — | — |
carno-php/console Version ~2.0 | — | — |
illuminate/support Version ^5.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.