The package is MIT-licensed, has a matching repository with tests, and installs without lifecycle scripts. Its small release history and absent security policy leave limited transparency, but recent commits from two contributors reduce abandonment concern.
78%
Total Score
100
79
50
The package is about 527 days old with four releases and only one release in the last 12 months, indicating a modest release cadence despite a recent latest release.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository-hygiene gap.
The repository has no security policy, which makes vulnerability reporting and coordinated disclosure less transparent for consumers.
Version v0.2.0 is not a prerelease, but the package remains below a stable major version, so its API may still evolve.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/http Version ^12.8|^13.0 | — | — |
smalot/pdfparser Version ^2.12 | — | — |
illuminate/support Version ^12.8|^13.0 | — | — |
thiagoalessio/tesseract_ocr Version ^2.13 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.