The package is clearly documented and licensed, with a matching source repository and no install-time scripts. Its maintenance and publication status make continued adoption a poor choice.
12%
Total Score
56
83
Packagist marks the entire package as abandoned and recommends sfneal/datum as its replacement. This is a direct warning against taking a new dependency on this package.
The latest release was published about 5 years and 9 months ago, with no releases in the last 12 months. This confirms prolonged release inactivity rather than a short pause.
The linked repository is archived, and it was last pushed about 5 years and 8 months ago. Archived source strongly indicates that maintenance and fixes have stopped.
Composer is used as the build tool, but no security scanning tools are present. This is a minor hygiene gap, outweighed by the stronger abandonment signals.
The repository has no security policy. That reduces disclosure transparency, although it is secondary to the package already being abandoned and archived.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sfneal/models Version >=0.3 | — | — |
sfneal/caching Version >=0.2.1 | — | — |
sfneal/filters Version >=0.2 | — | — |
illuminate/http Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.