Documentation, tests, a declared MIT license, and Dependabot provide useful project hygiene. The package has little visible adoption or maintainer activity, so future compatibility and support are uncertain.
42%
Total Score
0
100
79
83
The package has made no release in more than five years, despite having four releases overall. That long pause is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating no current maintenance.
The repository has 0 stars, forks, and watchers, so there is no visible community adoption to compensate for the lack of recent maintainer activity.
No repository security policy is present, which weakens vulnerability-reporting transparency. This is a secondary concern because the package does have other basic project hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/socket Version ^1.4 | — | — |
laravel/framework Version ^5.6 || ^6.0 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.