Usable with caveats: the package is clearly licensed, stable, and backed by a matching source repository, but it has had no release for over two years and no recent commits. Its very small artifact and lack of tests or security policy add maintenance uncertainty.
58%
Total Score
50
100
78
75
The registry namespace and repository owner match, but the owner is an individual account rather than an organization, offering limited evidence of durable institutional backing.
The package has eight releases since 2019, but the latest release was over two years ago and there were no releases in the last 12 months, indicating slowed maintenance.
There were no commits and no active maintainers in the last three months, which is a concrete sign of limited current maintenance capacity.
The repository has zero stars, forks, and watchers, so there is little visible community support to compensate for the inactive recent development.
The repository uses Composer, but no security scanning tools are present. This is a modest transparency and maintenance gap rather than a severe risk for this small package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.0.1 | — | — |
illuminate/support Version >=5.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.