A single publisher account and 14 runtime dependencies leave a small maintenance base and a broad upkeep surface. The release is not deprecated, but the available evidence is too thin to support a dependable long-term choice.
34%
Total Score
50
50
38
The package explicitly borrows the identity of the much more established laravel/ui, while it is not described as a fork. That makes consumer confusion a severe adoption risk.
The package has 21 releases but none in the last 12 months; its latest release was about 18 months ago. This sustained halt lowers confidence in ongoing maintenance.
Fourteen runtime dependencies create a broad compatibility and maintenance surface for a young package. No provided signal demonstrates that this complexity is actively managed.
Only one registry account has publish access, leaving a thin release-maintenance base. Registry access does not prove active development, so this does not compensate for the stalled release history.
The latest version is v0.1.21 and is not a stable major release, which indicates an immature API line. The absence of prereleases is a modest positive but does not offset the 0.x maturity concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.7 | — | — |
hyperf/engine Version ^2.1 | — | — |
hyperf/support Version ~3.1.0 | — | — |
hyperf/contract Version ~3.1.0 | — | — |
hyperf/tappable Version ~3.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.