It includes a readable package, tests, an MIT declaration, and no install-time scripts. A single maintainer and six runtime dependencies leave little visible resilience for future fixes. The repository could not be found, so current maintenance and provenance cannot be checked.
38%
Total Score
50
50
70
100
The package is nearly nine years old, but its latest release was in October 2017 and it has had no releases in the last 12 months. This strongly indicates abandonment risk.
Six runtime dependencies, including framework and SOAP components, create a meaningful compatibility and maintenance surface for a package whose releases stopped years ago.
Only one registry account has publish access. This does not prove inactivity by itself, but it leaves a thin visible maintainer base for an already stale package.
The assessed release is still a prerelease beta, and all recent releases are prereleases. That is a poor fit for a dependency whose maintenance has already stopped.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
smorken/model Version ~5.5 | — | — |
illuminate/support Version 5.5.* | — | — |
spatie/array-to-xml Version ^2.5 | — | — |
symfony/http-kernel Version ^3.0 | — | — |
zendframework/zend-soap Version ^2.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.