The package has a clear README, MIT declaration, and release notes, with no install-time scripts. Its tiny repository and lack of security tooling leave little evidence of ongoing support beyond the long maintenance gap.
42%
Total Score
0
75
75
Only two releases were published, and none occurred in the last 12 months; the latest release was about 5 years and 8 months ago. This is strong evidence of abandonment risk for a framework integration.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.
The repository has 2 stars and 1 fork, which is limited supporting evidence for maturity and community resilience. Low popularity is not decisive by itself, but it does not offset the maintenance gap.
Composer build tooling is present, but no security scanning tools were detected. The build setup is a small positive, while the missing security checks are a modest transparency gap.
The repository has no security policy. This weakens vulnerability-reporting transparency, although it is secondary to the more serious maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^5.0|^6.0|^7.0|^8.0 | — | — |
predictionio/predictionio Version 0.13.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.