lavavel sharding
46%
Total Score
unhealthy
Only two releases, no recent commits, and a repository that does not identify this package point to an immature dependency with abandonment risk.
The package has only 2 releases, both published about 466 days ago, with no releases in the last 12 months. That is weak evidence of ongoing maintenance for a young package.
There were 0 commits and 0 active maintainers in the last 3 months, indicating that maintenance has currently stopped or become dormant.
The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that this repository publishes this package.
The artifact declares Apache-2.0 but its license file is detected as MIT, creating an important licensing ambiguity despite having a license file and repository license.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package used in application code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.