The package has clear documentation and tests, with recent release notes and organization backing. The repository shows no commits in the last three months and lacks security scanning and a security policy; pin this version while maintenance resumes.
65%
Total Score
88
100
89
88
The repository recorded zero commits and zero active maintainers in the last three months. That contrasts with the recent release and is a meaningful maintenance concern.
The repository has one star and no forks or watchers, indicating limited visible adoption. Popularity is supporting evidence, so this is a minor concern rather than a health verdict.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no published security policy, making vulnerability reporting and response expectations less clear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spatie/url Version ^2.4 | — | — |
nesbot/carbon Version ^2.0|^3.0 | — | — |
guzzlehttp/guzzle Version ^7.8.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.