The repository remains intact, clearly matches the package, and has a usable README and MIT declaration. Its more than six-year release and commit silence outweigh that transparency; pinning it leaves you exposed to compatibility drift.
48%
Total Score
67
50
79
83
The package has 65 historical releases, but none in the last 12 months and its latest release was in February 2020. This long period without a release materially raises abandonment and compatibility risk.
The repository recorded no commits and no active maintainers in the last three months, consistent with the package's multi-year release silence. That indicates little current maintenance capacity.
Six runtime dependencies, including Laravel components and PDF/spreadsheet integrations, create a meaningful compatibility surface for an old package. The profile is not excessive enough to be a severe concern on its own.
The repository uses Composer build tooling, but no security-scanning tools were detected. The missing scanning is a modest transparency and hygiene concern.
No repository security policy was found. This is a minor transparency gap, though it is less important than the clear evidence of long-term inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/auth Version ^6.0 | — | — |
laravolt/support Version ^4.0.2 | — | — |
illuminate/support Version ^6.0 | — | — |
rap2hpoutre/fast-excel Version ^1.3.1 | — | — |
niklasravnsborg/laravel-pdf Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.