Risky to adopt: the package has not released anything since 2017, and its linked repository was last updated that year. It remains licensed, documented, tested, and non-deprecated, but the long maintenance gap makes abandonment and compatibility problems a substantial concern.
42%
Total Score
100
67
88
The package is about 9 years old but has had no releases in the last 12 months; all three releases were published in April 2017. This prolonged release inactivity is a substantial maintenance concern.
The repository is not archived, but it was last pushed about 9 years ago. Its unarchived status does not compensate for the observed lack of recent maintenance.
The repository has 0 stars, 0 forks, and 1 watcher, providing little supporting evidence of community adoption or ongoing project attention. Popularity is only supporting evidence, but these values reinforce the maintenance concern.
Composer is used as the build tool, appropriate for this PHP package, though no security scanning tools are configured. The tooling is adequate but offers limited additional assurance.
The linked repository has no security policy. This is a transparency gap, though it is less significant than the package's prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version ^5.0 | — | — |
league/flysystem-dropbox Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.