Organization backing and an unarchived, package-matching repository provide some continuity. The long release gap and absent recent commit activity make ongoing maintenance uncertain, while missing security tooling adds a smaller concern.
58%
Total Score
88
50
83
75
Seven runtime dependencies, including Laravel, OpenTelemetry, and HTTP components, create a moderate maintenance surface. The profile is not unusually broad for an integration package, but dependency compatibility remains relevant.
The package has only three releases and none in the last 12 months; the latest release was in March 2025, about 18 months ago. This is meaningful evidence of slowing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with no releases in the last year, this raises a clear maintenance and abandonment concern.
The repository has zero stars and two forks, indicating limited visible adoption. Popularity is supporting evidence rather than a verdict, so this is only a modest concern.
Composer build tooling is present, but no security-scanning tools were detected. That is a transparency and hygiene gap, though it is not severe enough to make the release unfit on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-http/httplug Version ^2.4 | — | — |
laravel/framework Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
guzzlehttp/promises Version ^2.0 | — | — |
open-telemetry/exporter-otlp Version ^1.0 | — | — |
open-telemetry/opentelemetry Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.