Usable with caveats: the package is clearly identified, licensed, documented, tested in its repository, and not deprecated or archived. However, its last release and repository push were about five years ago, so compatibility and maintenance risk are significant.
58%
Total Score
50
100
75
75
The registry namespace and repository are owned by the same individual, providing consistent ownership evidence. There is no organization backing to broaden the maintenance base.
The package has nine releases, but none in the last five years; its latest release was published in August 2021. This long period without a release is a meaningful maintenance and compatibility concern.
There were no new or merged pull requests and no new or closed issues in the measured month. Because the open-issues count is unknown, this is limited evidence but still offers no sign of current activity.
The repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible adoption signal reinforces the maintenance uncertainty.
Composer build tooling is present, but no security scanning tools were detected. For a small package this is a modest transparency gap rather than a severe dependency risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
livewire/livewire Version ^2.3 | — | — |
illuminate/support Version ^7.0|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.