The MIT license, included tests, and GitHub release provide some traceability. Its old Laravel application has no recent activity and the linked repository does not identify this package, so pinning it would be a poor dependency choice.
18%
Total Score
0
56
50
This package has only one release, published in October 2017, with no releases in roughly eight years. That strongly indicates abandonment for a dependency released at version 0.0.1.
There were zero commits and zero active maintainers in the past three months, consistent with the package having received no maintenance for years.
The repository name does not match the package name and its README does not mention the package. That raises a concrete concern that the linked source may not actually correspond to this release.
The package defines several Composer install and update lifecycle scripts. These may be normal for a Laravel application, but they add install-time behavior that deserves caution in an old, inactive package.
The repository has only 1 star, 1 fork, and 0 watchers. Low popularity is not decisive by itself, but it provides little evidence of community support for an otherwise inactive project.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
laravel/tinker Version ~1.0 | — | — |
laravel/framework Version 5.4.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.