The package includes a README, tests, release notes, and a matching repository, with no install-time scripts. Its single maintainer, very small user base, and lack of security scanning increase the risk of slow fixes and limited oversight.
52%
Total Score
50
75
75
One registry maintainer is responsible for publishing the package. With no recent commit activity, this leaves a thin apparent support base.
This is the only release, published in October 2023, with no releases in the last 12 months. That long release gap lowers confidence in ongoing maintenance.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the package having had no newer release. This is a meaningful maintenance concern.
The repository has only 3 stars, 0 forks, and 1 watcher, providing little evidence of broad community review or support. Low popularity is supporting caution rather than a decisive issue by itself.
Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and oversight gap, not evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brick/varexporter Version ^0.4.0 | — | — |
guzzlehttp/guzzle Version ^7.5 | — | — |
illuminate/support Version >9 | — | — |
stichoza/google-translate-php Version ^5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.