The repository has tests, release notes, and organization backing, but no security policy or scanning. Its sizable dependency set also increases the cost of reviving an otherwise dormant project.
43%
Total Score
67
50
88
50
The package declares 20 runtime dependencies, including framework, authentication, API, and administrative components. That breadth increases compatibility and maintenance burden when the project is not actively updated.
The latest registry release was nearly six years ago, with no releases in the last 12 months. The 22-release history shows earlier activity, but the current release cadence indicates substantial abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months. Its last push was in August 2023, so the project has not shown recent maintenance capacity.
There were no new or closed issues and no merged pull requests in the last month, while 24 issues and 33 pull requests remain open. This supports the evidence of inactive maintenance.
Composer build tooling is present, but no security scanning tools were detected. The build is established, while the missing scanning layer modestly reduces maintenance and security transparency.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
torann/geoip Version ^1.0 | — | — |
facade/ignition Version ^1.11 | — | — |
fideloper/proxy Version ^4.0 | — | — |
altek/accountant Version ^1.2 | — | — |
altek/eventually Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.