The Laravel Framework.
35%
Total Score
unhealthy
Risky: five years without a release or repository activity leaves this dependency effectively abandoned.
The package has only two releases, both about five years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a framework-style application dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the five-year release gap. No provided maintenance signal compensates for this inactivity.
The package defines post-autoload-dump, post-create-project-cmd, and post-root-package-install scripts. Install-time execution increases review and trust requirements, especially for a stale package.
A 3,810-character README and GitHub release are positive transparency signals, but the README is generic Laravel template material and does not document this package specifically. Missing tests and a changelog are normal for a published artifact and are not counted against it.
The repository name matches the package, but its README does not mention the package. The matching name is reassuring, while the missing package reference leaves some provenance ambiguity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/octane Version ^1.0 | — | — |
laravel/tinker Version ^2.5 | — | — |
fideloper/proxy Version ^4.4 | — | — |
laravel/fortify Version ^1.7 | — | — |
laravel/sanctum Version ^2.11 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.