The small but complete package structure, repository tests, MIT license, and matching source reduce adoption friction. Its only release and no commits or pull requests since March 2022 make future compatibility support uncertain.
52%
Total Score
50
75
50
This is the package's only release, published about 4 years ago, with no releases in the last 12 months. The stable version helps predictability, but the lack of any follow-up leaves maintenance and compatibility uncertain.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with no observed development since March 2022. No provided signal shows recent maintenance to offset that abandonment risk.
There were no new or merged pull requests in the last month, and no issues were closed during that period. This is supporting evidence of inactivity, though the open-issue count is unknown.
Composer build tooling is present, but no security-scanning tool was detected. The established build tooling is positive, while the missing scanning practice modestly reduces maintenance transparency.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a secondary transparency gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ~6.0 || ~7.0 | — | — |
illuminate/support Version ~6.0 || ~7.0 || ~8.0 || ~9.0 | — | — |
illuminate/notifications Version ~6.0 || ~7.0 || ~8.0 || ~9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.