The package is well documented, tested, licensed, and has a stable release history. Maintenance has stopped for about 10 months, with no recent commits, while workflow dependencies are unpinned and repository security scanning is absent.
62%
Total Score
50
100
83
75
The repository had 0 commits and 0 active maintainers in the last three months. Combined with the roughly 10-month-old last push, this is the strongest maintenance concern.
There are 3 open issues and no issue or pull-request activity in the last month, indicating limited recent community or maintainer responsiveness.
The repository has only 1 star and 1 fork, which limits external validation and signals a small user community. Low popularity alone does not outweigh the package's documentation and release history.
Composer build tooling is present, but no security scanning tools were detected, leaving dependency and code security checks less transparent.
The linked repository is not archived, although its last push was around 10 months ago, so archival risk is not present but continued maintenance is less certain.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
mpdf/mpdf Version ^8.0 | — | — |
illuminate/http Version ^8.0|^9.0|^10.0 | — | — |
illuminate/support Version ^8.83 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.