The repository is very small and has no security policy, although it includes tests and a GitHub release for this version. Pin this release only if you can accept its long-term maintenance and licensing uncertainty.
38%
Total Score
75
67
This package has only one release, published in May 2015, with no releases in the last 12 months. That strongly indicates abandonment risk despite the repository not being archived.
No license is declared, and neither the package nor the linked repository contains a license file. This creates a material adoption and redistribution risk.
The package contains a minimal 11-file tree with source code, configuration, and test scaffolding. That is consistent with a small Laravel integration, but provides little evidence of a mature project.
The repository has zero stars and forks and only one watcher. Popularity is not required for health, but these values provide no supporting evidence of active use or community maintenance.
The linked repository has no security policy. For a package with no recent maintenance evidence, this further reduces transparency and gives consumers no documented vulnerability-reporting path.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version 4.2.* | — | — |
raypower/taobao-api Version dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.