Unfit to use: the package is deprecated and its source repository is archived, with no release in about 10 years and no recent commits. It has a license, tests, documentation, and release notes, but those positives do not offset the abandonment risk.
15%
Total Score
50
50
100
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because the package is no longer presented as an actively supported dependency.
The latest release was published about 10 years ago, and there were no releases in the last 12 months. This is a strong sign that the dependency is obsolete for ongoing use.
There were no commits or active maintainers in the last 3 months. Together with the archived repository and stale release history, this indicates sustained abandonment rather than a brief pause.
The linked repository is archived, and its last push was about 7 years ago. Archived source strongly indicates that maintenance has ended.
There were no new or closed issues or pull requests in the last month, while 38 issues and 5 pull requests remain open. This supports the conclusion that project maintenance has stopped.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version >=2.8.3 <4.0 | — | — |
moontoast/math Version ^1.1.0 | — | — |
google/apiclient Version ^1.1.6 | — | — |
sendgrid/sendgrid Version ^4.0.1 | — | — |
intervention/image Version ^2.2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.