The package has a clear 39-file source tree, a readable package README, and no install-time scripts. Organization backing and a non-archived repository help, but the license mismatch and limited project safeguards make long-term adoption harder.
46%
Total Score
50
63
75
The latest release was about 6 years ago, with no releases in the last 12 months. Its earlier 40-release history shows past activity but does not offset the prolonged release gap.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the package's roughly 6-year release gap and indicating substantial abandonment risk.
The manifest declares MIT, but the artifact license file is detected as GPL-3.0. Although a license file exists, the mismatch creates legal uncertainty for consumers.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a secondary concern because the repository is otherwise identified and accessible.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ~2.3 | — | — |
laravel/framework Version >=5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.