The package has had no release in over two years and no recent commits, limiting confidence in ongoing maintenance. Tests, release notes, organizational ownership, and a matching repository provide useful evidence that the codebase is established.
58%
Total Score
83
100
81
88
The package has 10 releases since November 2020, but none in the last 12 months and the latest was in April 2024. This long release gap lowers confidence in continued maintenance.
There were no commits and no active maintainers in the last three months, and the repository's last push was in April 2024. This is concrete evidence of stalled maintenance.
The repository has four stars and one fork, indicating limited adoption. Popularity is only supporting evidence, so this modest count is a minor concern rather than a verdict.
Composer build tooling is present, but no security scanning tool was detected. This is a hygiene gap, partially offset by the small package and visible tests.
The repository has no security policy, making the process for reporting and handling vulnerabilities unclear. The package's tests and organizational backing do not replace that missing disclosure path.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/validation Version ~5.4|^6.0|^7.0|^8.0|^9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.