The package includes tests and a usable README, and its source repository matches the package. A sole registry maintainer and no security policy leave limited resilience if future fixes are needed.
42%
Total Score
50
50
81
83
The package declares three runtime dependencies and no development dependencies. The runtime dependency count is modest, but the absence of development dependencies provides little evidence about maintained testing or development workflows.
The manifest declares a proprietary license, so the release is licensed, but no license file was found. The declaration should be checked for compatibility with the consuming project's requirements.
Only one account has registry publish access. For a user-owned project this is not inherently abnormal, but it leaves little publishing redundancy when combined with the lack of recent activity.
The package and repository are owned by the same individual account, providing clear ownership context but no organizational backing. This is consistent with a small personal project and does not compensate for inactivity.
The latest release was in May 2017, with no releases in the last 12 months and only five releases overall. This long period without a release is a strong abandonment concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
predis/predis Version ~1.1 | — | — |
guzzlehttp/guzzle Version ~6.2.3 | — | — |
littlebookboy/laravel-request-recorder Version ~1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.