Tests, documentation, a stable MIT license, and organization ownership provide useful baseline transparency. The release and repository have been inactive since December 2020, with minimal adoption and no security tooling, so pinning it creates substantial maintenance risk.
43%
Total Score
50
60
50
The package has had no releases in nearly six years, with zero releases in the last 12 months. Its four-release history shows limited ongoing maintenance for an authentication component.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating substantial abandonment risk.
The repository has only 1 star, 0 forks, and 1 watcher, providing little evidence of broad review, adoption, or community support.
Composer build tooling is present, but no security-scanning tools were detected. That leaves security-sensitive changes without visible automated scanning support.
The repository has no security policy, which is a meaningful transparency gap for a package that issues and verifies authentication tokens.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lcobucci/jwt Version 3.2.4 | — | — |
randomstate/laravel-auth Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.