The package includes its license, source tests, changelog, release notes, and a repository that clearly matches it. A single registry maintainer and no security scanning reduce confidence in long-term support. Pin this version only if its older Laravel compatibility is intentional.
52%
Total Score
50
50
83
75
The package has 102 releases and a historically regular cadence, but no registry release has appeared for over six years. That long pause materially raises abandonment and compatibility risk.
The package declares 12 runtime dependencies, including framework and utility components. This is a meaningful dependency surface but not, by itself, evidence of poor maintenance or unsafe adoption.
Only one account has registry publish access. The linked project is user-owned rather than organization-owned, so there is limited visible publishing redundancy.
The registry namespace and repository owner match, and the repository is user-owned. This supports ownership continuity but does not provide organizational backing.
The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but the absent recent activity weakens evidence of ongoing maintenance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.8|^4.0 | — | — |
fzaninotto/faker Version ^1.8 | — | — |
league/flysystem Version ^1.0 | — | — |
illuminate/console Version ^5.7|^6.0|^7.0 | — | — |
illuminate/routing Version ^5.7|^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.