The package has clear licensing, tests, and a stable release history. Its source repository is archived with no commits in three months, and the registry marks the package abandoned; the lookalike naming also adds adoption risk.
15%
Total Score
25
100
61
83
The package borrows the identity of the much more established laravel/tinker package, and its monthly downloads are only 79 versus 14,079,082. Although artifact overlap is zero and the README does not identify it as the lookalike, the identity borrowing is strong adoption risk.
Packagist marks the entire package as abandoned, with no replacement identified. Package-level deprecation is a severe adoption risk because future maintenance is not expected.
The repository recorded zero commits and zero active maintainers in the past three months. This reinforces the abandonment signal rather than showing ongoing maintenance.
The linked repository is archived, which indicates the project is no longer intended for active maintenance. The recent push does not offset the repository's archived status.
The repository is owned by the laravel-enso organization, which provides organizational backing context. That backing does not override the archived repository and package deprecation signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^7.0|^8.0|^9.0|^10.0|^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.