The project has a matching source repository, tests, a stable release line, and a long release history. Maintenance evidence is mixed: the registry has had no release since May 2022, and there were no active maintainers or commits in the last three months.
60%
Total Score
83
100
88
75
The package has 114 releases since June 2018, but its latest registry release was in May 2022 and it had no releases in the last 12 months. The mature history helps, but the long release gap is a maintenance concern.
There were zero commits and zero active maintainers in the last three months. This weakens evidence of ongoing maintenance, despite the repository having a more recent push date.
Composer build tooling is present, but no security-scanning tools were detected. This is a hygiene gap rather than evidence that the package is unfit to use.
The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, though it is not by itself evidence of abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.5 | — | — |
nesbot/carbon Version ^2.0 | — | — |
webappid/lazy Version ^1.0@dev | — | — |
illuminate/support Version ^9.0 | — | — |
webappid/laravel-user Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.