Its tiny user base and lack of a security policy add little evidence of ongoing support. Licensing, documentation, and repository tests are in place, but maintenance capacity remains limited.
47%
Total Score
33
100
81
83
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and limited evidence of current maintenance.
Only one registry maintainer is listed, which creates a thin publishing base; the linked repository is user-owned rather than organization-backed, so there is no shown organizational compensation.
The registry namespace and repository owner match, but both identify a single user rather than an organization, offering limited backing evidence.
The package has had only 2 releases, with none in the last 12 months; its latest release was nearly six years ago. This is a substantial maintenance concern, though the package is not deprecated.
The repository has 1 star and 0 forks, providing very little supporting evidence of broad adoption or community backup.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/support Version ^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.