It has a clear MIT license, a README, repository tests, release notes, and a small runtime dependency set. Those positives do not provide enough confidence for a new dependency; choose a maintained replacement.
10%
Total Score
25
40
100
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because the registry explicitly signals that the package should no longer be relied on.
The package has had no release in more than six years despite 15 releases since January 2020. The prolonged release gap indicates a high abandonment risk.
There were no commits and no active maintainers in the last three months. Combined with the archived repository and absent recent releases, this confirms that maintenance has stopped.
The linked source repository is archived and was last pushed in July 2021. An archived project is not expected to receive normal maintenance or fixes.
There were no new issues, pull requests, or merged pull requests in the last month. This is consistent with an inactive project, though the available activity data does not by itself establish severity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.