The repository is very small, has only one registry maintainer, and lacks a security policy, although it includes a license, tests, and a changelog. If you must use it, pin v3.1.4 and verify compatibility with your Laravel and PHP versions.
38%
Total Score
25
50
67
75
The package has had no release in over 7 years, despite 46 historical releases. This strongly indicates abandonment and outweighs its earlier release activity.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with more than 7 years without observed maintenance.
Thirteen runtime dependencies, including framework, queue, Redis, and process components, create a meaningful compatibility surface for a package that has not been updated for years.
Only one registry account has publish access. This is a thin publishing base, and no organization backing is shown to compensate for it.
The repository name matches the package, but its README does not mention the package name. That mismatch raises some concern that the source relationship is not clearly documented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.5 | — | — |
predis/predis Version ^1.1 | — | — |
symfony/debug Version ^4.2 | — | — |
cakephp/chronos Version ^1.0 | — | — |
symfony/process Version ^4.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.