It has a clear MIT license, release notes, and a matching repository with Composer, Dependabot, and Sonar support. The project has no repository tests or security policy, and its recent maintenance activity is limited.
72%
Total Score
50
100
94
83
The package is mature at over 11 years old, but it has made only one release in the last 12 months and has a median release interval of about 176 days, indicating a slow cadence.
There were zero commits and zero active maintainers in the last three months. A recent release partly offsets this, but the current lack of development activity is a maintenance concern.
The repository has no published security policy. This is a transparency gap, although the available security scanning provides some compensating project hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
overtrue/pinyin Version ^6.0 | — | — |
laravel/framework Version ^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.