Risky to adopt: this package has had no release or repository activity since December 2018, leaving its Laravel and PHP dependencies likely outdated. It is correctly linked, MIT-licensed, and not deprecated or archived, but the long abandonment period outweighs those positives.
42%
Total Score
0
50
75
75
The package has only three releases, all concentrated in December 2018, with no releases in the last 12 months and an age of about 7 years and 9 months. This is strong evidence that the release is no longer maintained.
The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the last push occurring in December 2018. No provided signal shows renewed maintenance.
The package declares seven runtime requirements, including Laravel components, another package, and several PHP extensions. This is a meaningful compatibility surface for an unmaintained package, with no newer release evidence to show those requirements remain current.
The repository has zero stars and forks and one watcher, so there is little community evidence to compensate for the lack of maintenance. Popularity is supporting evidence only, but here it provides no additional confidence.
Composer is used for the build, but no security-scanning tools are configured. This is a transparency gap, although the repository has no workflows that create an active automation risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
roshangara/parser Version dev-master | — | — |
illuminate/support Version ^5.0 | — | — |
illuminate/database Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.