The package includes a README, tests, an MIT license, and no install-time scripts. Its source has had no commits or releases since February 2017, with no security policy and no security scanning, so maintenance risk is high.
36%
Total Score
25
50
78
83
The package has 38 releases but none in the last 12 months, and its latest release was published in February 2017. This long period without releases is strong evidence of abandonment for a framework integration package.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last push in 2017, this indicates the project is effectively inactive.
The package declares eight runtime dependencies and no development dependencies. This is a substantial integration surface, and the absence of development dependencies limits the visible maintenance context.
The package and repository are owned by the same individual account, so the source appears correctly associated with the package. Individual ownership offers less visible organizational continuity than provided organization backing.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide no meaningful adoption signal to compensate for inactivity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ~2.3 | — | — |
zizaco/entrust Version 1.7.0 | — | — |
illuminate/support Version 5.* | — | — |
illuminate/container Version ^5.2|^5.1 | — | — |
spatie/laravel-backup Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.