The Apache-2.0 license and organization-owned repository provide clear ownership and legal coverage. The five-file README leaves little guidance, and no security policy makes maintenance concerns harder to assess.
38%
Total Score
50
79
75
The latest release was published in April 2020, with no releases in the following 6 years and 5 months; the package is effectively dormant despite five historical releases.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and providing no evidence of current maintenance.
The package includes a README, but it is only 5 characters long and offers virtually no consumer guidance. The absence of published tests and a changelog is normal packaging practice and is not counted against it.
The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities; the organization backing provides some ownership context but does not replace that process.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
predis/predis Version ^1.1 | — | — |
laravel/framework Version ^6.2 | — | — |
simplesoftwareio/simple-qrcode Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.