The matching project is MIT-licensed, documented, and includes tests, with no install-time scripts. Its single registry maintainer and absent security policy provide little additional maintenance assurance.
39%
Total Score
0
75
75
The latest release was published in August 2014, and there were no releases in the last 12 months. That long release gap is strong evidence of abandonment for a dependency.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package having received no development attention since August 2014.
The repository has zero stars, one fork, and one watcher. Popularity is only supporting evidence, but these numbers provide little community reassurance alongside the inactivity.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This matters more for an API integration that handles service credentials.
The latest version is v0.95 rather than a stable major release, which leaves the package with less mature versioning. This is secondary to its much more serious inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 4.* | — | — |
chargebee/chargebee-php Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.