The package includes a matching GPL-3.0 license, tests, and no install scripts. It has no security policy or scanning, so there are few current safeguards beyond its small, tested codebase.
35%
Total Score
50
71
75
This is the package's only release, published over 11 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk despite the package not being formally deprecated.
The repository recorded zero commits and zero active maintainers in the last three months. With only one historical release, there is no observed recent maintenance capacity.
There were no new or closed issues or pull requests in the last month. This is consistent with the long-standing lack of development activity and provides no evidence of ongoing project support.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these numbers offer no additional adoption or community-maintenance confidence.
Composer is used for the build, but no security-scanning tools are present. For a dependency package, that is a modest maintenance and assurance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vlucas/phpdotenv Version ~1.0 | — | — |
illuminate/events Version ~5.0 | — | — |
illuminate/console Version ~5.0 | — | — |
illuminate/support Version ^5.0 | — | — |
illuminate/database Version ~5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.