This package is effectively abandoned: the registry marks it as deprecated (packagist_abandoned) and the linked repository is archived with no recent commits or issues. The latest release is years old, so you should not rely on updates or security fixes.
15%
Total Score
25
33
The registry flags the package as deprecated via packagist_abandoned at the package level, not just this one release. That is a strong indicator of abandonment risk for dependency use.
Releases have not occurred in the last 12 months and the latest release is 2017, despite the artifact version being 1.0.3. This long gap suggests no ongoing maintenance for this dependency.
There are zero commits in the last 3 months and zero active maintainers in that window. That aligns with an abandoned or effectively inactive project.
The linked source repository is archived, with last push in 2019 (years ago). Archived state strongly correlates with no future maintenance or security updates.
The artifact includes a README, and there is GitHub Release notes for version 1.0.3, which is helpful for consumers. However, there are no tests/changelog bundled in the artifact, and maintenance still appears inactive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nodes/core Version ^1.0 | — | — |
pubnub/pubnub Version 3.7.* | — | — |
laravel/framework Version 5.1.*||5.2.*||5.3.*||5.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.