Testing and licensing are in place, and the package is not deprecated or archived. Its small audience and lack of security tooling leave little support if the long-standing inactivity causes problems.
42%
Total Score
50
50
72
83
The latest release was in March 2020, with no releases in the last 12 months; this is strong evidence of abandonment risk despite eight total releases.
Five runtime dependencies, including Guzzle and Illuminate Support, create ordinary dependency maintenance exposure but do not by themselves indicate an unhealthy package.
A single registry maintainer indicates limited publishing redundancy, though the repository is owned by the same individual and the package is not deprecated.
The repository is owned by an individual rather than an organization, so the single-person publishing and maintenance base represents genuine continuity risk.
The repository has zero stars and forks and only one watcher, providing little evidence of community review or support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ~6.0 | — | — |
illuminate/support Version ~5|~6|~7 | — | — |
netresearch/jsonmapper Version ^1.6|~2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.