It includes a substantial README, tests, a matching repository, and MIT licensing. The single-maintainer, low-activity project should be treated as unmaintained; adopting it leaves you responsible for compatibility fixes.
38%
Total Score
25
75
75
The package has had no release in more than eight years: all seven releases, including v1.0.6, were published on February 26, 2018. This is strong evidence of abandonment for a framework integration package.
The repository recorded zero commits and zero active maintainers in the last three months, with its last push on February 26, 2018. The repository is not archived, but that does not offset the prolonged inactivity.
Only one account has registry publish access. That is a limited publishing base, and the absence of recent repository activity provides no evidence of an active backup maintainer.
The repository has one star and no forks, providing little evidence of a broad user or contributor community that could help sustain the package.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are configured. This is a minor hygiene gap rather than a primary adoption blocker.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ~1.0 | — | — |
illuminate/config Version ~4.2|^5 | — | — |
illuminate/database Version ~4.2|^5 | — | — |
elasticsearch/elasticsearch Version >1.0 <2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.