The release includes tests, clear documentation, a matching license, and recent activity. Those strengths do not offset the project's archived status and package-wide deprecation, so choose an alternative maintained dependency.
18%
Total Score
50
100
63
83
Packagist marks the entire package as abandoned, with no replacement provided; this is a direct warning against taking a new dependency even though the release itself is recent.
The linked repository is archived, so active maintenance and future fixes should not be expected despite being pushed recently.
The repository is owned by the individual user misaf, not an organization, so there is no provided organizational backing to offset the concentrated maintenance base.
The package is only 24 days old with five releases, showing recent publication but too little history to establish long-term reliability.
All seven recent commits came from one contributor, leaving no demonstrated backup maintainer; the repository owner is an individual rather than an organization.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^13.0 | — | — |
illuminate/support Version ^13.0 | — | — |
spatie/laravel-package-tools Version ^1.93.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.