The repository has tests, documentation, and a matching package reference, with a clear MIT license. Maintenance evidence is weak, with no activity since February 2022, no recent releases, and no security policy or scanning.
42%
Total Score
50
63
50
The package has had no releases in the last 12 months, and its latest release was on February 24, 2022. Forty-eight historical releases show prior activity but do not offset the long current gap.
There were no new issues, closed issues, new pull requests, or merged pull requests in the last month, and there are no open pull requests. This provides no evidence of current maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external maintenance signal to compensate for the inactivity.
Composer build tooling is present, but no security-scanning tools are configured. This is a modest hygiene gap rather than evidence that the release is unsafe.
The repository is not archived, but it was last pushed on February 24, 2022, consistent with the package's prolonged inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
namshi/jose Version ^7.0 | — | — |
lcobucci/jwt Version ^3.2 | — | — |
nesbot/carbon Version ^1.0|^2.0 | — | — |
illuminate/auth Version ^5.1|^6 | — | — |
illuminate/http Version ^5.1|^6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.