The package has a clear MIT license, a substantial README, and no install-time scripts. Its small contributor and user footprint leaves little evidence of support if compatibility problems arise.
42%
Total Score
100
100
72
83
Only six releases were published, all clustered on November 2, 2022, with no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.
The repository has zero stars, forks, and watchers. Popularity is not required for a healthy small package, but this provides no supporting evidence of active community use.
Composer is used for the build, but no security-scanning tools are present. This is a modest transparency and maintenance gap rather than a severe risk on its own.
The repository is not archived, which is a compensating signal, but it was last pushed on November 2, 2022 and shows no recent maintenance in the provided evidence.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This modestly reduces transparency for a package used in applications.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.62 | — | — |
illuminate/auth Version ^9.0 | — | — |
illuminate/support Version ^9.0 | — | — |
illuminate/database Version ^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.