The README, MIT license, matching organization repository, and absence of install-time scripts support straightforward use. Release and commit activity are thin, with no security policy or scanning; pin this version only if limited maintenance evidence is acceptable.
58%
Total Score
83
100
88
83
Only two releases exist, with none in the last 12 months; the latest release was over a year ago. This is meaningful evidence of limited release maintenance.
There were zero commits and zero active maintainers in the last three months. Combined with the old release history, this lowers confidence in ongoing maintenance.
Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance gap, though not a severe risk by itself.
The repository has no security policy. For a package that stores and encrypts application settings, this leaves vulnerability-reporting practices unclear.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^4.0 | — | — |
illuminate/support Version ^12.0 | — | — |
illuminate/database Version ^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.