Electron wrapper for the NativePHP framework.
15%
Total Score
critical
Unfit to use: the package is abandoned and its source repository is archived.
Packagist marks the entire package as abandoned and names NativePHP/desktop as the replacement, which is a severe adoption risk for this release.
Although the package has 44 releases since July 2023 and historically released frequently, it had no releases in the last 12 months, showing that publishing has stopped.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment indicated by the archived state.
The linked NativePHP/electron repository is archived, indicating the project is no longer maintained despite a recorded push on May 27, 2026.
All 20 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; these are additional workflow hygiene and supply-chain concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/prompts Version ^0.1.1|^0.2|^0.3 | — | — |
nativephp/laravel Version ^1.0 | — | — |
nativephp/php-bin Version ^1.0 | — | — |
symfony/filesystem Version ^6.4|^7.2 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.