The package has no declared or detected license, and its README is only nine characters. Its stable version and matching repository provide some transparency, but not enough to offset the long maintenance gap.
35%
Total Score
25
60
50
The latest release was almost 10 years ago, with no releases in the last 12 months and only two releases overall. This is strong evidence of abandonment risk.
The repository has recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap.
Neither the package nor the repository contains a declared or detected license or license file, leaving the legal terms for adoption unclear.
A single registry maintainer provides little publishing redundancy, and no organization backing is shown to compensate for that thin base.
The package includes a README, but it is only nine characters long and there are no tests or changelog. Missing tests and changelog are normal for published artifacts; the extremely limited consumer documentation is still a minor gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
laravel/framework Version >=5.2.0 | — | — |
zsping1989/margin-tree Version >=1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.