OneSignal Push Wrapper Laravel
56%
Total Score
caution
Usable with caveats: no commits or releases since March 2025.
The package has had four releases but none in the past 12 months, with the latest published about 18 months ago. This indicates stalled maintenance despite the package being relatively young.
The repository recorded zero commits and zero active maintainers over the past three months, consistent with the lack of recent releases and raising abandonment concerns.
The repository has zero stars, forks, and watchers, providing no community adoption evidence. Popularity is supporting evidence only, so this modestly lowers confidence rather than determining the verdict.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, but it is less serious for a small, inactive wrapper than archival status would be.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.2|^7.4.1|^7.2 | — | — |
illuminate/support Version ~5.5|~6.0|~7.0|~8.0|~9.0|^10.0|^11.0|^12.0 | — | — |
symfony/psr-http-message-bridge Version 1.*|2.*|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.