Risky to adopt for a new project: the package has had no releases since October 2015 and no recent repository activity. It is not deprecated or archived, and the repository matches the package with clear licensing and documentation, but its age and stalled maintenance create substantial compatibility and abandonment risk.
42%
Total Score
50
67
50
The latest release was about 10 years and 11 months ago, with no releases in the last 12 months. This strongly indicates the package is no longer actively maintained.
The repository had zero commits and zero active maintainers in the last three months. This is direct evidence of currently stalled maintenance.
There are six open pull requests, with no new or merged pull requests in the last month. Unresolved contributions add to the evidence that maintenance is inactive.
The repository is not archived, which is a positive sign, but it was last pushed about 2 years and 10 months ago. The non-archived status does not compensate for the long period without current development.
The repository has no security policy. This is a transparency and incident-response gap, although it is less important than the package's demonstrated lack of recent releases and commits.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ~5.0 | — | — |
laravel/framework Version ~5.0 | — | — |
illuminate/support Version ~5.0 | — | — |
microsoft/application-insights Version ^0.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.