A matching repository, included tests, and a modest dependency set provide useful transparency. License files are present, but the declared and detected licenses differ, and no security policy is published.
20%
Total Score
50
50
50
The registry marks the entire package as abandoned, not merely this release, with no replacement specified. That is a severe adoption and maintenance risk.
The package has 13 releases but none in the past 12 months; its latest release was in September 2023. This indicates prolonged release inactivity.
The repository recorded zero commits and zero active maintainers in the past three months, consistent with the package's prolonged release inactivity.
A license file is present, so the release is licensed, but the manifest declares MIT while the detected file license is MIT-0. The mismatch reduces transparency.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counters provide little evidence of community adoption.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
firebase/php-jwt Version ^6.8 | — | — |
illuminate/support Version ^9.0|^10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.