Risky to depend on: the package has had no release since 2016 and no recent repository activity, with no tests or security tooling. It is small and licensed, but its maintenance and transparency are too weak for a dependable SDK.
32%
Total Score
0
50
75
The package has made only 3 releases, all concentrated in September 2016, with no releases in the last 12 months. This long release gap is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This indicates no current maintenance capacity for an SDK that may need API and dependency updates.
The repository is not marked archived, but it was last pushed in March 2017, leaving roughly 9 years without observed updates. The unarchived status does not compensate for the prolonged inactivity.
The package includes a short README, but it has no tests or changelog; the missing tests are a meaningful quality gap for a library, while the GitHub release setup provides only limited compensating project hygiene.
The repository name does not match the package name and its README does not mention the package, so the link between the registry package and source repository is less transparent than expected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/config Version ^5.2 | — | — |
duncan3dc/sessions Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.