Its MIT manifest conflicts with the GPL-3.0 license file, while documentation is present and installation has no lifecycle scripts. The repository is small and lacks security scanning.
35%
Total Score
50
50
The package borrows the identity of the much more established laravel/octane, with explicit lookalike borrowing and no self-described fork or integration evidence. Consumers may most likely have intended laravel/octane instead.
A license file is present, so this is not an unlicensed release, but the manifest declares MIT while the detected LICENSE text is GPL-3.0. The mismatch creates a real adoption and compliance concern.
The package is about 13 months old but has had no releases in the last 12 months; its five releases were concentrated at launch. That points to likely abandonment despite a stable current version.
The repository had zero commits and zero active maintainers in the last three months, matching the stalled release history. The repository is not archived, but there is no recent activity showing ongoing maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version >=10 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.