This release appears suitable to depend on from a maintenance and transparency perspective: it is backed by an active organization-owned repository, has recent and frequent releases, meaningful recent commit activity from three contributors, tests, a substantial README, a license file, and no deprecation or archival indicators. The main reservations are that the package remains below a stable major version, has modest repository adoption, uses an install-time post-autoload-dump script, and lacks a security policy; these warrant normal dependency review but do not outweigh the strong evidence of active development and project backing.
82%
Total Score
100
100
83
80
A post-autoload-dump install-time script is present, adding execution surface and making installation behavior worth reviewing, although this signal alone does not indicate abandonment.
The repository has 6 stars, 1 fork, and 0 watchers, indicating limited adoption and external visibility. Popularity is supporting evidence only, so this modest footprint is a caution rather than a health verdict.
Composer build tooling is used, but no security scanning tools are reported. The build setup is appropriate, while the missing scanning is a modest process gap.
No repository security policy was found, reducing the project's published vulnerability-reporting transparency. This is a genuine hygiene gap but not evidence that the package is unmaintained.
Version v0.8.33 is not a stable major release, so API compatibility and maturity may be less predictable even though it is not marked as a prerelease.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/pool Version ^3.1|^3.2 | — | — |
nesbot/carbon Version ^2.66.0|^3.0 | — | — |
hyperf/context Version ^3.1|^3.2 | — | — |
laravel/prompts Version ^0.1.24|^0.2.0|^0.3.0 | — | — |
symfony/console Version ^6.0|^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.