The repository has no recent commits and no security policy, while its license, tests, and README are present. Pin 1.4.2 and verify compatibility before adopting it in a new production project.
54%
Total Score
33
100
81
75
The package has had no releases in the last 12 months, and its latest release was in April 2020. This is the strongest maintenance concern, though the repository was pushed in February 2023.
There were zero commits and zero active maintainers in the last three months. The February 2023 push offers limited compensation, but current maintenance capacity appears weak.
The package and repository are owned by the same individual account rather than an organization. This is consistent ownership, but it indicates a limited backing structure.
There were no new or closed issues or pull requests in the last month, while four pull requests remain open. This suggests limited project follow-through.
Composer build tooling is present, but no security scanning tools were detected. The absence of scanning is a hygiene gap rather than evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ~5|~6|~7 | — | — |
pragmarx/countries Version ^0.7.0 | — | — |
google/cloud-bigquery Version ^1.15 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.