The package has clear documentation, tests, a changelog, and matching source code. Its small single-person project has no recent maintenance or security policy, which raises long-term support concerns.
42%
Total Score
50
100
78
50
Only two releases were published, both in September 2021, with no release in the last 12 months. This is strong evidence of prolonged inactivity, although the stable 1.0.1 version reduces version-churn risk.
There were zero commits and zero active maintainers in the last three months, following a last push in October 2021. This is strong evidence that maintenance has stopped.
The package declares a post-autoload-dump lifecycle script. This is an install-time behavior that merits awareness, but the signal provides no evidence that it is unsafe or unusually invasive.
Only one registry maintainer is listed, leaving little visible publishing redundancy. The matching user-owned repository provides some backing, but not the resilience of a broader maintainer base.
There are no open issues or pull requests and no recent issue or pull-request activity. This is consistent with an inactive project, but it does not show unresolved maintenance work.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.3 | — | — |
illuminate/support Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.