The README is candid about limited testing, and the tiny source tree offers little evidence of production maturity. Its MIT declaration and lack of install scripts reduce adoption friction, but do not offset the maintenance gap.
18%
Total Score
25
58
83
The package has only one release, published over 10 years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with its last push being in July 2016. This materially raises abandonment risk.
A README and release notes are present, but the project reports no tests and explicitly documents that the integration was not battle tested. The release notes provide some transparency but do not establish reliability.
The repository is owned by an individual rather than an organization, matching the small maintainer footprint shown by the activity signals. There is no organizational backing to offset the long inactivity.
The repository has 0 stars, 1 fork, and 1 watcher, providing little evidence of broad external use or community support. Low popularity alone is not decisive, but it does not compensate for the lack of maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
latte/latte Version ^2.3 | — | — |
laravel/framework Version ^5.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.