The MIT license, README, and matching repository make the package straightforward to inspect. A single maintainer, no security scanning, and negligible repository adoption leave little evidence of durable support.
42%
Total Score
33
50
72
75
The package is about 2 years old, has only 3 releases, and has had no releases in the last 12 months; its latest release was about 23 months ago. This is strong evidence of abandonment risk despite the initially regular 15-day median interval.
There were 0 commits and 0 active maintainers in the last 3 months, while the repository was last pushed about 2 years ago. This is the clearest evidence that maintenance has stopped or substantially weakened.
The package has 4 runtime dependencies and no development dependencies. The runtime footprint is understandable for a Laravel SDK wrapper, but the absence of development dependencies provides no evidence of testing or maintenance tooling.
Only one registry account has publish access. The repository owner is an individual rather than an organization, so there is no provided backing evidence to offset the thin maintainer base.
The repository is owned by an individual account, not an organization, and no organizational backing is shown. This increases the significance of the package's single-maintainer and inactive-commit signals.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/helpers Version ^1.4|^1.5 | — | — |
illuminate/support Version ~5.8|~6.0|~7.0|~8.0|^9.0|^10.0 | — | — |
graham-campbell/manager Version ^2.0|^3.0|^4.0|^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.