The repository is still maintained, with a recent release and a clear license, but activity comes from one contributor and the project has no security policy or automated tests. Use the listed replacement instead.
20%
Total Score
67
72
67
Packagist marks the entire package as abandoned and names taksu/laravel-settings as its replacement. This is a severe adoption risk despite the repository remaining active.
The package has six releases over roughly three years and two releases in the last 12 months, including a release about two months ago. Recent publishing offsets abandonment concerns somewhat but cannot override the package-level deprecation.
All recent commits come from one contributor, so maintenance depends on a single person even though the repository is owned by an organization.
Three commits were made in the last three months by one active maintainer, showing recent maintenance but limited activity.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counters provide little external maturity signal.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.