Risky to adopt: the package has had no release or commit activity for over five years, with only two releases ever. It is not deprecated or archived, but its inactive maintenance and minimal project maturity make it a liability for new dependencies.
42%
Total Score
50
100
61
83
Only two releases have been published, and none appeared in the last five years; the latest release was on April 11, 2021. This is strong evidence of abandonment risk despite the package's stable versioning.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with more than five years without a push. This materially increases abandonment risk.
The linked repository is not archived, but its last push was on April 11, 2021, leaving the project inactive for over five years. The non-archived status does not offset the prolonged inactivity.
There are no open issues or pull requests and no recent issue or pull-request activity. While this avoids an unresolved backlog, it also provides no evidence of ongoing project support.
The repository name matches the package name, so it appears to be the intended source repository. The README does not mention the package name, which is a minor transparency gap rather than evidence of repository misattribution.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 | — | — |
lumphp/laravel-contracts Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.