The dependency list is small and the package has a matching repository, while its MIT declaration and clean workflow audit add useful transparency. The brief README and absent security policy leave limited guidance for long-term maintenance and incident handling.
43%
Total Score
25
100
67
50
Only two releases exist, with the latest published in May 2023 and none in the last 12 months. That long publishing gap is substantial for a package consumers may need to track as PHP and framework versions change.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package having received no visible maintenance since its last release.
One registry maintainer is responsible for publishing, which creates a thin publishing base. The linked repository is owned by the same individual, so there is no shown organization backing to offset that concentration.
The package includes a README, which is useful for installation, although it is only 81 characters and provides little integration guidance. The absence of tests and a changelog in the published artifact is normal packaging practice and is not penalized.
The repository has only 3 stars, 1 fork, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of a broad user or contributor community.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dcat/laravel-admin Version ~2.0 | — | — |
alibabacloud/vod-20170321 Version ^2.16 | — | — |
alibabacloud/darabonba-openapi Version ^0.2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.