Unfit to use: this release is deprecated, the source repository is archived, and the package has had no release or commit activity for years. Its license, documentation, tests, and changelog are present, but they do not offset the abandonment risk.
12%
Total Score
25
100
50
90
Packagist marks the entire package as abandoned, with no replacement specified. That is a severe adoption risk because future maintenance and compatibility support are not indicated.
The package has 16 releases, but none in the last 12 months and its latest release was in June 2017. Its earlier release cadence shows historical activity but does not compensate for the prolonged gap.
The repository recorded zero commits and zero active maintainers in the last three months. This confirms that current maintenance capacity is absent rather than merely infrequent.
The linked repository is archived and was last pushed in March 2018, so the project is no longer actively maintained. This materially raises abandonment and compatibility risk.
The repository is owned by an organization, which can support project backing, but the concrete maintenance signals show the repository is archived and inactive. Organizational ownership therefore does not materially offset the abandonment risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^1.21 | — | — |
league/oauth2-server Version ^4.1 | — | — |
nordsoftware/lumen-core Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.