The package has a clear license, tests, release notes, and a repository that matches its published name. Its single-maintainer ownership and absent security scanning leave less oversight than mature alternatives.
72%
Total Score
63
100
89
75
One registry publishing account is present. That is a limited publishing base, though the linked project is clearly owned by the same individual.
The package has been maintained since February 2016 with 24 releases, but only one release appeared in the last 12 months, indicating a slow current cadence.
There were zero commits and zero active maintainers in the last three months. This is the clearest current abandonment concern, although the latest release was recent.
The repository has two open issues and four open pull requests, but none were opened or closed in the last month, providing little evidence of recent community activity.
The project uses Make and Composer but reports no security-scanning tools, leaving a security-process gap that is relevant to a dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ~1.0 || ^2.0 || ^3.0 | — | — |
illuminate/support Version 5.*|6.*|7.*|8.*|9.*|10.*|11.*|12.* | — | — |
illuminate/container Version 5.*|6.*|7.*|8.*|9.*|10.*|11.*|12.* | — | — |
illuminate/filesystem Version 5.*|6.*|7.*|8.*|9.*|10.*|11.*|12.* | — | — |
mnabialek/laravel-version Version ^1.0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.